RE: help understanding security log events

Tech-Archive recommends: Fix windows errors by optimizing your registry



Check out the Manakoa System Controls MP. It should provide the monitoring
and reporting your looking for.

http://www.manakoa.com/products/scmp/

"Mark King" wrote:

> This would show them logging on/off any resource (windows station locks,
> exchange server) etc.
>
> "Don Campbell" wrote:
>
> > I am trying to track the logon/logoff activity for a user. I have auditing
> > turned on and when I look in the event log, I get IDs 538,576 & 540
> > repeatedly for the same user id. These occur almost constantly for each user
> > and there can be hundreds of logon/logoff events for the same user in the
> > same day. What am I seeing and what have I got configured wrong? I know my
> > users are not actually logging on and off that much.
> >
> > Thanks!
> > -Don Campbell
.



Relevant Pages

  • RE: help understanding security log events
    ... This would show them logging on/off any resource (windows station locks, ... exchange server) etc. ... "Don Campbell" wrote: ... > I am trying to track the logon/logoff activity for a user. ...
    (microsoft.public.windows.server.general)
  • Re: centralized syslog
    ... > reporting to one logging node, i would like to have this logging ... > changing the logs, as for now when i use the -h startup option in the ... For Security and Open Source news: ...
    (Security-Basics)
  • centralized syslog
    ... I have this scenario of a collection of Linux nodes ... reporting to one logging node, i would like to have this logging ... changing the logs, as for now when i use the -h startup option in the ...
    (Security-Basics)
  • RE: network traffic logging tool ?
    ... You can probe with Snort ... Asunto: network traffic logging tool? ... firewall and reporting package can provide. ...
    (Security-Basics)
  • Re: WORD - Count number of keys pressed
    ... I need to get the information back to VB as it is logging this into a ... database for reporting. ... Garry ...
    (microsoft.public.vb.general.discussion)