If you enable it in Domain Controller Security Policy, file auditing will work only on domain controllers. Also check to see if the security log is
full. You may want to clear it and be sure to increase the size of it
substantially. --- Steve
"Ken" <Ken@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8B443B1C-4C57-4359-97FD-CD76817308EF@xxxxxxxxxxxxxxxx >I have enabled "Audit Object Access" in the default domain controllers
> policy, its been enabled for a few days now. However, when I set a file up
> for auditng for success or failure of multiple attributes such as delete
> etc,
> the changes never show up in the Event Viewer Security log, so I suppose
> its
> not working or I have something configured incorrectly. Note that "Audit
> Account Management" is also enable in this policy and is writing to the
> security log with no issues.
>
> Any help would be greatly apprecitated.
>
>
> Thanks
Re: Default Domain password policy issue ... The domain controllers are members of authenticated users. ... as for applied Group Policy objects for computer settings....Policy replication/version problems.... The settings in this GPO can only apply to the following groups, users, ... (microsoft.public.windows.group_policy)
Re: Blocking port scans on local network ... You can implement enumeration of SAM accounts and shares with probably no ... on domain controllers via Domain Controller Security Policy depending of ... domain computer that has a "require" ipsec policy assigned to it. ... between domain computers and domain controllers as the domain controllers ... (microsoft.public.win2000.security)
RE: Account Lockout Policy ... he didn't say that the policy would be *linked* at ... the Domain Controllers OU, just that the domain password policy would apply ... the Domain Controllers OU will still use the password policy that is defined ... they still utilize the domain-level account settings, because, again, the ... (Focus-Microsoft)
Re: Blocking port scans on local network ... > additional restrictions for anonymous connections in this security guide.... > do not recommend applying ipsec policy wide scale without some testing of ... > between domain computers and domain controllers as the domain controllers ... (microsoft.public.win2000.security)
Re: Authentication Failure ... You mention that you are using image installs which is fine but the imaging ... require access to a global catalog server.... between domain members and domain controllers.... >> administrator and clearing the security log.... (microsoft.public.win2000.security)