RE: help understanding security log events
- From: "Jeremiah Beckett" <JeremiahBeckett@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 2 Jun 2005 13:24:02 -0700
Check out the Manakoa System Controls MP. It should provide the monitoring
and reporting your looking for.
http://www.manakoa.com/products/scmp/
"Mark King" wrote:
> This would show them logging on/off any resource (windows station locks,
> exchange server) etc.
>
> "Don Campbell" wrote:
>
> > I am trying to track the logon/logoff activity for a user. I have auditing
> > turned on and when I look in the event log, I get IDs 538,576 & 540
> > repeatedly for the same user id. These occur almost constantly for each user
> > and there can be hundreds of logon/logoff events for the same user in the
> > same day. What am I seeing and what have I got configured wrong? I know my
> > users are not actually logging on and off that much.
> >
> > Thanks!
> > -Don Campbell
.
- Prev by Date: Server 2003 Isass.exe - System Error
- Next by Date: RE: Audit logon events
- Previous by thread: Server 2003 Isass.exe - System Error
- Next by thread: RE: Audit logon events
- Index(es):
Relevant Pages
|