Re: Auditing Questions

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Matjaz Ladava [MVP] (matjaz_at_ladava.com)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 18:41:30 +0200

By default Auditing is set on Domain Controllers GPO setting and thus
enforced on all domain controllers. This is enough as account management is
done at DC's so it is audited there.
You could enable auditing on your Domain level. This would affect all your
clients and I don't know that you want to do that. 

-- 
Regards
Matjaz Ladava
MVP Windows Server - Directory Services
matjaz@ladava.com, matjazl@mvps.org
"Or" <anonymous@discussions.microsoft.com> wrote in message 
news:238f801c45e9c$17229cf0$a401280a@phx.gbl...
>
> Does Auditing of events (example is Account Management
> Success and failure ) is replicated to a Domain?
>
>
> What is the difference of doing the  audit in Domain
> controller and in the Domain level?
>
>
>
>

Relevant Pages

  • Re: Auditing Account management events
    ... If you have configured auditing of account management in Domain Controller ... Security Policy, check the Local Security Policy of your domain controllers ...
    (microsoft.public.win2000.group_policy)
  • Re: Adding Computers to the Domain
    ... You would already have had to have auditing of account management in place to find ... --- Steve ... >> In the Domain Controller Security Policy enable auditing on account ...
    (microsoft.public.win2000.security)
  • Re: auditing active directory not working properly directory service access
    ... > Check the other containers such as OUs, computer, user, domain controllers ... > to see if any auditing is configured there also which you would also want to ... >>After enabling auditing for permission changes on the root of the domain, ... >>Best regards, ...
    (microsoft.public.windows.server.security)
  • Re: auditing active directory not working properly directory service access
    ... Check the other containers such as OUs, computer, user, domain controllers ... to see if any auditing is configured there also which you would also want to ... > After enabling auditing for permission changes on the root of the domain, ...
    (microsoft.public.windows.server.security)
  • Re: Domain admin users audit
    ... I don't receive any account management Event on Domain ... Controllers however i received all logon events, ... >Account Management auditing will cover the ...
    (microsoft.public.win2000.active_directory)