2003 Logon Audit Problem

Hi,

I have a 2003 domain controller, SP1. It dosent log logon failure audits in
the event viewer. Ive edited the domain group policy to audit success and
failures, still, when I log on incorrectly, it dosent log it. (from console,
remote desktop, or general domain user)

>From Default domain policy
computer configuration\windows settings\security settings\local
policies\audit policy

I have success and failure enabled for:
Audit account logon events

I also tried to open the secpol.mmc and the same tree is locked, due to the
ad/group settings I assume.

Being in a relatively hostil environment, at a University, its pretty
important that I get that logging to work.

Last thing.. I also tried disabling the above setting, applying it, then
re-enabling it and applying it just to see if that would help.

Any insight would be greatly appreciated.

Underfire
.

Relevant Pages

  • Re: No security logs getting generted
    ... When i click on Group policy tab in domain controller properties below ... Audit Account Logon Events - Success, Failure ...
    (microsoft.public.win2000.general)
  • Re: Local Security Policy problem - Need Help
    ... > Local Security Policy. ... > Audit Policy, and then click the events that you want to audit. ... Audit account logon events (Success, Failure) ...
    (microsoft.public.windowsxp.security_admin)
  • Re: No security logs getting generted
    ... you have linked the policy to and where the server is located in the OU structure. ... Audit Account Logon Events - Success, Failure ...
    (microsoft.public.win2000.general)
  • Re: Audit Policy
    ... events and/or account logon events to track user usage. ... you want to configure auditing in Domain Controller Security Policy. ... audit success and failure for account logon events. ...
    (microsoft.public.win2000.security)
  • Re: Audit Policy
    ... logon events and/or account logon events to track user usage. ... failure but audit success and failure for account logon events. ... constraints, corp policy, etc.. ...
    (microsoft.public.win2000.security)