Audit Account Logon events not logged...

T

ThomasV

Hi,

We've enabled Auditing on Account Logons on our domain controlers(3
dc's). (Success and Failure)
For the last four days the related events stopped appearing in the
security event logs. (Events 672-673-675-677-680-681)

When i look at the policy result on a domain controller, the settings
appear to be right.

Has anyone ever had simmilar problems?

Thanks in advance...


ThomasV
 
R

Ryan Hanisco

Thomas,

I have seen this happen when the logs are full and are not set to allocate
more space. It sounds simple, but is this the case??
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Audit account logon events causes security log meltdown :( 1
Audit Account Logon Events, Client IP address incorrect? 7
Account management events audit !! 2
Windows 2000 domain / Account logon auditing 1
SecPol Audit Policy: Diff between "Audit account logon events" and "Audit logon events" ? 2
Audit Logon Events vs. Audit Account Logon Events 1
How to know from which machine a user logged on to the domain 1
Audit Logons 1

Top