Re: Logon/Logoff events!

this post may be just what I need. I am a new inexperienced administrator of
a small network using 2003 SBS. Last week I noticed numerous logon/logoff
events for each user within seconds. these event numbers are 680, 576, 540,
538 and an occasional 673. I am concerned over the number of entries per
second - there may be 25-30 for the same user. I was concerned I had a
network problem. However, if I understand this entry correctly, this is
normal - one set 576, 540 and 680 for each access need?

If I am correct on the above, then can I turn some of those notices off so I
don't see them all? or do you advise me to leave them on?

I started cruising through the event logs because I am suffering very slow
response time on my PC to server connections. and, I don't know how to
trouble shoot why. can you point me to another location for help with that?

thank you!

"Paul Williams [MVP]" wrote:

> Yes, there will be a number of audit events. Basically the user will
> request access to the resource, will be required to show credentials,
> therefore will get a Kerberos ticket that validates itself to that server
> and then use that ticket. You will see audit events for a number of stages
> of the Kerberos TGS process and an actual [network] logon to that server.
>
> Perhaps there's a better way of achieving what you want. Especially if
> you're only interested in Internet logs. Create a generic account, allow an
> autologon onto a Kiosk type workstation and grant access to the Internet
> through ISA based on user group membership. You'll then have a way to track
> this user. ISA2004 writes to MSDE so you can provide custom reports based
> on just this user if you know SQL or can afford SQL Reporting Services
> (which looks really cool).
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
>
.

Relevant Pages

  • Re: Fully parallel Scheme-based language w/ evaluator
    ... Windows Server 2003 and networks in simple - and irreverent - terms. ... If networking really is a big deal, ... Concepts and Terminology in Part I, and The Design and Deployment of Network ...
    (comp.lang.misc)
  • Re: Outgoing POP3 email missing/lost/not received
    ... Funny thing is that I have had this ISP for 8 years and it has always been ... It looks like when you last ran CEICW, you set the ISP's mail server to: ... Internet Connection Wizard. ... After the wizard completes, the following network connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.general)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.dns)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.networking)
Loading