Re: Prove someone logged in

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/30/04 

Date: Fri, 30 Jul 2004 19:11:58 GMT

Auditing of account logon will have to be first enabled in Domain Controllers
Security Policy and then you will have to look in the security logs of the domain
controllers and an event will be recorded on the domain controller that authenticated
the user. --- Steve

"Paul" <anonymous@discussions.microsoft.com> wrote in message
news:743601c4764c$2cb52e80$a401280a@phx.gbl...
> Hi Everyone,
>
> I was asked to prove that someone logged in or didn't
> login. I thought it would be listed in the Servers
> EventViewer under Security Log but I don't see it in there.
>
> Thanks for the help!
> Paul

Relevant Pages

  • Re: Automatically user lockout - big problem
    ... Check the security logs of the domain controllers to ... By default logging of account ... Comb can be used to scan domain computers for that account lockout event. ...
    (microsoft.public.windows.server.security)
  • Re: Who disabled this account?
    ... Then enable auditing of account management in the Domain Controller Security ... Policy and look in the security logs of the domain controllers for Event ID 629. ...
    (microsoft.public.win2000.security)
  • Re: aduiting user acount
    ... to use a account lock out tool which i download from the microsoft site. ... > I told that I could review security logs on either of DCs. ... > have to do to turn on.However I could not see any ip of the client. ... >>> events in security logs on either of domain controllers. ...
    (microsoft.public.win2000.active_directory)
  • Re: Password Visibility
    ... Your best bet is to enable auditing of account management on domain ... controllers and then looking in the security logs of the domain controllers ... be sure to increase the size of the security logs substantially. ...
    (microsoft.public.windows.server.security)
  • Re: Auditing Account management events
    ... If you have configured auditing of account management in Domain Controller ... Security Policy, check the Local Security Policy of your domain controllers ...
    (microsoft.public.win2000.group_policy)