Re: Domain Security Policy

From: Arc J. Thames (revarcjt_at_hotmail.com)
Date: 12/08/04 

Date: Wed, 8 Dec 2004 09:11:28 -0600

All security audit events end up in the "Security Log" in event viewer.
For auditing account adds/deletes...audit "Account Management" events.

Arc
MCSE/MCSA 2k/2k3, MCT
"Kelly" <Kelly@discussions.microsoft.com> wrote in message
news:ECE4604C-C4D2-4824-BF58-459E3376F081@microsoft.com...
> On Win2K Server, I have enabled some of the Audit Policies under Local
> Policies in Domain Security Policy. How can I audit them? Do they get
logged
> in event viewer?
>
> How can I audit, if a user was added, deleted or its group membership was
> changed? And who changed it?
>

Relevant Pages

  • Re: Security Event Log Empty
    ... Take a look at the following link - this will help you decide your audit ... Windows XP Security Guide ... Security Settings for Windows XP Clients ... >> Just wondering why my Security log files in Event viewer is empty. ...
    (microsoft.public.windowsxp.security_admin)
  • Audit not working.
    ... Audit on one of my servers does not write any logs to security ... event viewer. ... Audit is set up correctly. ... Is there some king of bug? ...
    (comp.os.ms-windows.nt.admin.security)
  • RE: syslog
    ... For the same kind of environment, I am using Computer Associates eTrust ... Audit integrated with Security command center for an easy event management ... and consolidation of logs + administration of all the Security ...
    (Security-Basics)
  • RE: Blue Team ROE
    ... These types of constraints are a way to create the illusion of due ... diligence in that they are having an outside company perform a security ... the audit by client constraints. ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • Re: Cant restart but can start
    ... Clicking Souce column shows only ... There are no errors under Security. ... I'm going to do a reboot and then see exactly what the event viewer tells us. ... It may be a third party software conflict..or a driver update..do you ...
    (microsoft.public.windowsxp.help_and_support)