Re: Audit interactive logins workstations on DC event viewer

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


"Andy1974" <Andy1974@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:75F09AC7-38E9-43AB-8E5D-4B1DD1CE0CB3@xxxxxxxxxxxxxxxx
>I am trying to see workstation interactive logins in the Windows 2003 DC
> event viewer but am not seeing the events. I am seeing Remoteinteractive
> as
> well as interactive directly into the Domain Controller itself. However
> workstation computers that are a member of the domain are not registering
> event 528 or 539 type 2's in the event viewer. I have Domain Security
> Settings for Audit account logon to Success and Audit logon events to
> success. I have Domain Controller Settings to audit account logon to
> Success
> and Failure and Audit Logon to Success and Failure. I am running Windows
> 2003 Small Business Server.

I'm not sure you'll be able to see anything related to non-domain computers
at all in your event logs. You can audit use of a domain user account, but
that isn't really the same thing. What exactly is it you're trying to do?


.

Relevant Pages

  • Re: Auditing Workstation logons from DC
    ... logs you are at risk of reliability loss by local admin flushing of logs. ... >>> well as interactive directly into the Domain Controller itself. ... >>> Settings for Audit account logon to Success and Audit logon events to ... I have Domain Controller Settings to audit account logon to ...
    (microsoft.public.security)
  • Re: Auditing Workstation logons from DC
    ... > well as interactive directly into the Domain Controller itself. ... > Settings for Audit account logon to Success and Audit logon events to ... I have Domain Controller Settings to audit account logon to ... > and Failure and Audit Logon to Success and Failure. ...
    (microsoft.public.security)
  • Auditing Workstation logons from DC
    ... I am trying to see workstation interactive logins in the Windows 2003 DC ... Settings for Audit account logon to Success and Audit logon events to ... I have Domain Controller Settings to audit account logon to Success ...
    (microsoft.public.windows.group_policy)
  • Auditing Workstation logons from DC
    ... I am trying to see workstation interactive logins in the Windows 2003 DC ... Settings for Audit account logon to Success and Audit logon events to ... I have Domain Controller Settings to audit account logon to Success ...
    (microsoft.public.windows.server.sbs)
  • Auditing Workstation logons from DC
    ... I am trying to see workstation interactive logins in the Windows 2003 DC ... Settings for Audit account logon to Success and Audit logon events to ... I have Domain Controller Settings to audit account logon to Success ...
    (microsoft.public.windows.server.security)