Re: why so many Success Audit entries in Security Log?

The default auditing policies in SBS are set to the recommended auditing
level for maximum security. I would certainly never advise anyone to lower
their security settings from the recommended configuration.

That said, I only monitor success for account management and policy change.
If someone were to go against my best security-oriented advice and change
their own settings, they would do it by editing the Small Business Server
Auditing Policy. Specifically, you'd change it under Computer
Configuration -> Windows Settings -> Security Settings -> Local Policies ->
Audit Policy. At any time you change a group policy, especially one
relating to security, I recommend carefully documenting that change in case
you later want to undo it.


"Jerome" <foo@xxxxxxx> wrote in message
news:eYllgCntGHA.4928@xxxxxxxxxxxxxxxxxxxxxxx

It looks like there's an entry in the Security Event Viewer every couple
seconds throughout the day. Why so much "no problem" activity?



.

Relevant Pages

  • Re: Detail display for audit policy
    ... manipulating with security such as Scriptlogic's Security Explorer ... are talking about auditing I would suggest using Active Administrator ... If I want to audit the user permission. ... auditing through Group Policy, you can enable it in each server's Local ...
    (microsoft.public.windows.server.security)
  • Re: Auditing on a member server
    ... Look in Local Security Policy to make sure that it shows ... auditing is enabled as you expect. ...
    (microsoft.public.windows.server.security)
  • RE: Win2K Advanced Server
    ... Security events only get logged when you enable Auditing. ... Security Policy by expanding the Local Policies tab, ...
    (microsoft.public.win2000.setup)
  • Re: Audit Deleting of files
    ... Yes you can do it on a single computer but you need to enable auditing of "object ... Open Local Security Policy via secpol.msc and configure auditing as Laura ...
    (microsoft.public.win2000.security)
  • Fwd: Oh Dear, Where to start?!
    ... It seems to me you need two things: an organizational policy, ... finish college and break into the real world of computer security. ... experience in the field of network security and policy ... updates, driver updates, and recommended updates. ...
    (Security-Basics)
Loading