Re: Auditing Questions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Matjaz Ladava [MVP] (matjaz_at_ladava.com)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 18:41:30 +0200

By default Auditing is set on Domain Controllers GPO setting and thus
enforced on all domain controllers. This is enough as account management is
done at DC's so it is audited there.
You could enable auditing on your Domain level. This would affect all your
clients and I don't know that you want to do that. 

-- 
Regards
Matjaz Ladava
MVP Windows Server - Directory Services
matjaz@ladava.com, matjazl@mvps.org
"Or" <anonymous@discussions.microsoft.com> wrote in message 
news:238f801c45e9c$17229cf0$a401280a@phx.gbl...
>
> Does Auditing of events (example is Account Management
> Success and failure ) is replicated to a Domain?
>
>
> What is the difference of doing the  audit in Domain
> controller and in the Domain level?
>
>
>
>

Relevant Pages

  • Re: Auditing Account management events
    ... If you have configured auditing of account management in Domain Controller ... Security Policy, check the Local Security Policy of your domain controllers ...
    (microsoft.public.win2000.group_policy)
  • Re: auditing active directory not working properly directory service access
    ... > Check the other containers such as OUs, computer, user, domain controllers ... > to see if any auditing is configured there also which you would also want to ... >>After enabling auditing for permission changes on the root of the domain, ... >>Best regards, ...
    (microsoft.public.windows.server.security)
  • Re: Adding Computers to the Domain
    ... You would already have had to have auditing of account management in place to find ... --- Steve ... >> In the Domain Controller Security Policy enable auditing on account ...
    (microsoft.public.win2000.security)
  • Re: auditing active directory not working properly directory service access
    ... Check the other containers such as OUs, computer, user, domain controllers ... to see if any auditing is configured there also which you would also want to ... > After enabling auditing for permission changes on the root of the domain, ...
    (microsoft.public.windows.server.security)
  • Re: FSO to non domain server UNC?
    ... > auditing on all domain controllers for that domain. ... > for logon failure on all domain controllers and you still see nothing in the ... the IWAM and IUSR accounts - just not when FSO does it from a web page. ...
    (microsoft.public.inetserver.iis.security)