Re: logon events

Not offhand but what you can try is a registry snapshot program such as the
free regshot. Take a snapshot on a computer just before you enable it and
then again after you enable. Then compare the snapshots. I am sure it would
be in HKLM. Curious that you would need to use the registry as you can use
Group Policy to configure audit policy on domain computer and import
security templates configured as you need into non domain computers using
the secedit command. If you use regshot to track down user settings just
remember to make the changes in HKEY_CURRENT_USER as regshot will show the
setting but for the HKEY_USERS with the user SID.

Steve

http://www.snapfiles.com/get/regshot.html --- Regshot

"Andreas Moroder" <andreas.moroder@xxxxxx> wrote in message
news:44f08fb4$0$35083$4fafbaef@xxxxxxxxxxxxxxxxxxxxxx
Hello,

does anyone know the registry key to set to enable the "logon events"
instead of using the administrative tools ?

Thanks
Andreas


.

Relevant Pages

  • Re: any good registery moniter software
    ... RegMon is a tool by Mark Russinovich ... A second program is RegShot. ... RegShot takes a snapshot ... of the registry at any time you choose and you can compare that snapshot to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: logon events
    ... Take a snapshot on a computer just before you enable it and then again after you enable. ... Curious that you would need to use the registry as you can use Group Policy to configure audit policy on domain computer and import security templates configured as you need into non domain computers using the secedit command. ... If you use regshot to track down user settings just remember to make the changes in HKEY_CURRENT_USER as regshot will show the setting but for the HKEY_USERS with the user SID. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Mapped Drive
    ... Offhand I don't know but what I would do is to use something like Regshot to ... take a snapshot of your registry before and after you create a share to see ... what changes in the registry. ... > registry setting to achive this. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: error using lebans ReportToPDF
    ... This is an Access non Western language Snapshot registry entry issue. ... Here is a detailed explanation of the issue by a Spanish Access MVP: ... write a wrong entry in windows registry for the Snapshot Format. ...
    (microsoft.public.access.reports)
  • RE: [Full-Disclosure] Windows Registry Analzyer
    ... Use RegMon for real-time Reg watching and try this product for Snapshot ... RegShot is a small registry compare utility that allows you to quickly ... >> Anyone know of any free tools to analyze what changes have ...
    (Full-Disclosure)