Re: Log-in log-out

Click on Start | Run and enter gpedit.msc

Look in:

Local Computer Policy\Computer Configuration\Windows Settings\Security
Settings\Local Policies\Audit Policy\Audit account logon events

When you double click on "Audit account logon events" you will see the
options to set the Success, Failure audits.

Just checked both: success and failure but even if I restart my PC (to
log-in) no 528 event is found! Maybe the problem could be related to the
fact on the 3rd columns of the "Audit account logon events" is written that
the only valid setting is the failure.. and not the success: what do you
think?

Mhaxx


.

Relevant Pages

  • RE: Logging User Logon/Logoff
    ... I apologize it's the "audit account logon events" that needs to be enabled. ... Therefore you can uncheck the success and failure of the "audit logon ...
    (microsoft.public.windows.server.sbs)
  • W2K3 R2 is not logging/auditing failure events
    ... Audit Account Logon Events, and selected audit success and failure. ...
    (microsoft.public.windows.group_policy)
  • Tracking logon and logoff activity
    ... Audit account logon events (Success, Failure) does not ... The domain 2000 security Policy is configured properly. ...
    (microsoft.public.win2000.security)
  • Re: monitor logon time
    ... Click on Local Policies/Audit Policies, ... double click on "Audit Account Logon Events" in the right pane. ... Close the local security snap-in. ...
    (microsoft.public.windowsxp.general)
  • Re: Success Audits -> A nightmare!
    ... I went as far as switching ... Audit account logon events. ... policy refresh settings. ...
    (microsoft.public.windows.server.sbs)