Re: Terminal Service Log File?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: EEC1 [MSFT] (mikeva_at_online.microsoft.com)
Date: 10/06/04 

Date: Tue, 5 Oct 2004 17:54:03 -0700

You can turn on Auditing through the Local Security Policy:
Start -> Settings -> Control Panel -> Administrative Tools -> Local Security
Policy

Look in: Security Settings\Local Policy\Audit Policy

Enable Auditing (both Success and Failures) for the events you'd like to
have recorded in the Event Log.

For more info:
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/gp/515.asp 

-- 
Thanks,
Mike
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included script samples are subject to the terms specified at 
http://www.microsoft.com/info/cpyright.htm
Please do not send e-mail directly to this alias.
This alias is for newsgroup purposes only.
"Papilio Herodula" <papher@invalid.net> wrote in message 
news:4163bb4e.126969655@news-40.giganews.com...
>
> How can I get a log file of any attempts to log on to
> my Windows 2000 Server machine, either via TSC,
> FTP, or VPN? I don't see anything in the help files
> about it.
>
> I know the Event Viewer will show me if anyone fails
> in three attempts to log on with a bad password, but
> I cannot see how to follow successful attempts (should
> someone obtain or guess a correct user name and
> password).
>
> Thanks,
>
> Ph
>

Relevant Pages

  • Re: Terminal Service Log File?
    ... You can turn on Auditing through the Local Security Policy: ... Enable Auditing (both Success and Failures) for the events you'd like to ... > How can I get a log file of any attempts to log on to ...
    (microsoft.public.win2000.networking)
  • Re: Logging attempted access over a networked connection
    ... you have to enable auditing of object access in local security policy ... App trying to read from that same location on System A, ...
    (microsoft.public.security)
  • Re: Login Tracking
    ... You can turn on Auditing through the Local Security Policy: ... Enable Auditing (both Success and Failures) for the events you'd like to ... Please do not send e-mail directly to this alias. ...
    (microsoft.public.win2000.advanced_server)
  • auditing object access
    ... access on these directory and succesful permission change. ... When i enable auditing of object access on Local security ... Policies for SUCCESS and on object enbale SUCCESS for ...
    (microsoft.public.win2000.security)
  • Re: to log in file any users who are connected to a map drive (or share folder)
    ... Why not enable Auditing of the shares for Success, and use the Security Log? ...
    (comp.os.ms-windows.nt.admin.security)