SDDL confirmation -- Set event log security for the domain

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Article 323076 talks about registry settings to allow "domain" access to
security logs for a particular group. I just want to confirm that if I make a
change on one domain controller that it will propagate to the other domain
controllers in the same domain. But reading more closely leads me to believe
that this change is static and will only affect one "local" domain controller.

Can one of you MCP's or other qualified individuals respond?

Thanks,

Roy

http://support.microsoft.com/default.aspx?scid=kb;en-us;323076#XSLTH3157121122120121120120


.

Relevant Pages

  • Re: Cannot browse to a domain controller across windows domains
    ... There are no security audit entrys success ... > or failure in the security logs when I try to log on...as though the ... > workstation which I am trying to browse the DC with has never contacted ... > to the domain controller of the outside domain. ...
    (microsoft.public.windows.server.networking)
  • Re: Adding Computers to the Domain
    ... then review your security logs in Event Viewer on the domain controllers for Event ID ... right -add workstations to the domain in Domain Controller Security Policy. ...
    (microsoft.public.win2000.security)
  • Re: Computer join/disjoin log
    ... In Domain Controller Security policy enable auditing of account management ... You will have to look in the security logs ... > that join and disjoin the domain with the user account that was used to ...
    (microsoft.public.windows.server.security)
  • Re: How to audit who adds computers to domain
    ... Enable auditing of acount managment events in your Domain Controller ... Security Policy and then look for event ID 645 in the security logs in Event ... Microsoft to do this for multiple computers at a time. ...
    (microsoft.public.win2000.networking)