auditing single user activity

[Rowdy Yates]

hi, is it possible to audit individual user activity?

i'm trying to audit the activities of a single user account. i don't want
to audit everything and then filter the logs.

is that possible?


Rowdy Yates, MCSE

 

[Cary Shultz [A.D. MVP]]

Rowdy,

I do not think so. But, what exactly are you trying to audit? As you know,
there are a lot of things that can be audited ;-)

Cary

 

[Rowdy Yates]

Rowdy,

I do not think so. But, what exactly are you trying to audit? As you
know, there are a lot of things that can be audited ;-)

Cary

nothing out of the ordinatry. will be auditing system changes, policy
changes, login's e.t.c.. this is non-AD server. but i was wondering if
there was a way to just audit only certrain user object/account activity.
don't want to waste event log space on auditing information for accounts i
know i don't care about.

i didn't think there was, but i thoguth i would give it a try anyway. never
hurts to ask.

Rowdy Yates, MCSE

 

[Steven L Umbach]

Well kind of. You can enable auditing of object access and then enable auditing of
objects such as folders/files/AD objects for an individual user, however there will
still be lots of seemingly unrelated events in the security log. For auditing of
logons, account management, process tracking, and such there is no way to do so for
individual users. --- Steve