Re: auditing on win2003

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 02/24/05 

Date: Wed, 23 Feb 2005 23:46:31 -0600

Maybe it just means it was not configured for auditing that category - object access. There are several categories to audit for the security log. --- Steve

  "z. f." <zigi@info-scopeREMSPAM.co.il> wrote in message news:O8OLXRYGFHA.3732@tk2msftngp13.phx.gbl...
  Hi,

  my system is windows 2003,
  i wanted to configure auditing on NTFS directory access.
  i got a message that my computer is not configured for auciting and that i have to change the settings in local security policy.
  this is OK.
  but how the security log has records from before the change if the computer was not configured for auditing, is this some windows 2003 default that is not actually configured anywhere?

  TIA, z.

Relevant Pages

  • Re: Cannot see audit events in security log
    ... If auditing of object access for success and failure has been enabled in the ... Local Security Policy on that computer and auditing has been ... should be recorded in the security log after trying to access the folder as ...
    (microsoft.public.win2000.security)
  • Re: auditing question - single file object access creates duplicate security log messages
    ... Windows object access auditing is based on handle usage. ... don't audit nicely with this architecture- they open ... > one audit message in the security log when a file is read. ...
    (microsoft.public.win2000.security)
  • Re: Cannot see audit events in security log
    ... I tried turning auditing off and on again after converting to NTFS in ... > If you enabled auditing of object access then you should see events in the ... > the size of the security log quite a bit and clear the log first. ... >> trying to establish auditing on a folder and its contents. ...
    (microsoft.public.win2000.security)
  • Re: Cannot see audit events in security log
    ... If you enabled auditing of object access then you should see events in the ... the size of the security log quite a bit and clear the log first. ... > trying to establish auditing on a folder and its contents. ...
    (microsoft.public.win2000.security)
  • Win2K User access tracking- HELP
    ... you need to activate auditing. ... Then you can see events logged in the Security log. ... Windows 2000 Help. ...
    (microsoft.public.win2000.security)