Re: Logging on/off

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Todd J Heron (todd_heron_no_spam_at_hotmail.com)
Date: 03/14/05 

Date: Mon, 14 Mar 2005 16:13:52 -0500

You can certainly stop the auditing. You do this in the Domain Controller
Security policy. As far as what it's looking for re: more detail you'll
need a packet analyzer such as Ethereal to get at the answers you're looking
for. 

-- 
Todd J Heron, MCSE
Windows Server 2003/2000/NT
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights.

Relevant Pages

  • Re: security log anomolies
    ... object access in particular can generate a huge amount of events especially ... auditing of account logons would be most ... overriding Local Security Policy. ... controllers in particular as Domain Controller Security Policy will override ...
    (microsoft.public.win2000.security)
  • Re: remote desktop rights on domain controller
    ... First of for domain controllers user rights must be configured in Domain ... Controller Security Policy - not local policy. ... The user right for logon ... Group on the domain controller if using Windows 2003. ...
    (microsoft.public.windows.server.security)
  • Re: Many events in Security log
    ... If you do not want those events then disable auditing in "Domain Controller ... Security Policy" which is where you manage auditing for domain controllers. ... >> memory and cpu usage with Task Manager. ...
    (microsoft.public.windows.server.security)
  • Domain controller lost all security settings
    ... I have a windows 2000 AS configured as domain controller. ... users have unrestricted rights to the domain ... Nobody in our organization has played with group policy or domain controller ... Controller Security policy or domain security policy i recieve an error ...
    (microsoft.public.win2000.group_policy)
  • Re: Making Object Access Auditing Work
    ... Double Checked that the auditing is enabled in the Domain Controller ... > It shows auditing of object access it is disabled in Local Security Policy. ...
    (microsoft.public.windows.group_policy)