SBS2K Server, how to change local policy, auditing on. Make Effective Setting.



Hello,

I ran Microsoft's MBSA 1.2.1 and noticed that auditing was not on on one
server. I turned auditing on for the domain on the server, I verified the xp
workstations were correct, auditing is on in GP. But how I do it turn on
auditing for the local server itself? I changed the domain policy through
Active Directory Users and Computers.

For the local server itself, I thought it was done through Domain Controller
Security Policy. But the server itself states, in the Domain Controller
Security Policy, that the only Local Setting set (success, failure) and
Effective Setting set is "Audit Account Management." The rest state the
correct setting in Local Setting but "No Auditing." in Effective Setting.
And I Change the Effective Setting.

Was I supposed to instead of editing the default domain policy in Active
Directory Users and Computers, add a new one? I tried that, to no avail.

I am missing an obvious setup in this equation.

Thanks in advance,

Smith


.



Relevant Pages

  • Re: Auditing object access from network
    ... server with domain member clients accessing the target file structure via ... I want to audit file deletions in specific directories of a file server, ... NOT BY USERS ACCESSING FILES VIA THE NETWORK. ... Set up auditing ACLs for every entity in Active Directory, ...
    (microsoft.public.win2000.security)
  • RE: filenames changing
    ... Mal is right, let's turn on file auditing, and troll the security log ... the server resides, right-click on it and click Properties. ... On the Group Policy tab, select a GPO and click Edit (if there's no GPO ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: URLSCAN.INI 0 Bytes in length
    ... I have turned on auditing now for that file. ... There are 10 websites running on this server. ... and am going to apply SP4 and see if I have any problems on it. ... > I'd suggest you check the event viewer and IIS logfiles. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Event ID 538/540/576 fills up Security Log!!
    ... Maybe you don't have auditing for "privilige use" enabled on ... > I wonder why would this happen and if it's really related to backup jobs. ... > Could it be just issues of Exchange Server 2000?? ...
    (microsoft.public.win2000.security)
  • RE: Auditing File Deletion NOT WORKING
    ... If you open the GPEDIT.msc in that server, ... what the effective setting is for the following: ... Wait for automatic policy propagation, ... Auditing File Deletion NOT WORKING ...
    (microsoft.public.win2000.security)