auditing

Discussion in 'Microsoft Windows 2000 Group Policy' started by Dave, Jan 24, 2007.

  1. Dave

    Dave Guest

    I have two 2003 DCs in a Windows Server 2003 environment, rubble and ashes.

    rubble is doing proliferous logging of success "logon/logoff" security
    events. ashes only logs failure logon/logoff security events, which is what
    I want.
    rubble has no "account logon" events, but I assume that's because ashes is
    the PDC emulator master, which does have account logon failure events.

    I've checked all the GPOs, including the domain controller security policy
    on both DCs, and there is no "logon/logoff" auditing policy set. Why would
    rubble be logging them, or how can I see the internals of how this is
    happening? I've tried the RSOP tool, but no matter what I do with it, it
    tells me that such events are not logged on rubble. The problem is that
    these success logon/logoff events occur dozens of times per second and I'd
    like to recover some system performance. I've even tried setting the
    auditing for the appropriate events to Disabled in GPOs, but it doesn't seem
    to have any effect in stopping these events.

    Thanks,
    Dave
     
    Dave, Jan 24, 2007
    #1
    1. Advertisements

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Victor The Terrible

    Auditing User Group Policy Settings

    Victor The Terrible, Jul 17, 2003, in forum: Microsoft Windows 2000 Group Policy
    Replies:
    1
    Views:
    542
    Vsevolod Titov [MSFT]
    Jul 17, 2003
  2. Ali

    Confused on auditing...

    Ali, Jul 22, 2003, in forum: Microsoft Windows 2000 Group Policy
    Replies:
    0
    Views:
    470
  3. Gregg Irwin

    Auditing of User rights locally on a server

    Gregg Irwin, Dec 12, 2003, in forum: Microsoft Windows 2000 Group Policy
    Replies:
    3
    Views:
    257
    Gregg Irwin
    Dec 12, 2003
  4. Guest

    Object Access Auditing causes security log to fill up

    Guest, Dec 24, 2003, in forum: Microsoft Windows 2000 Group Policy
    Replies:
    3
    Views:
    1,231
    Guest
    Jan 13, 2004
  5. CW

    Question about auditing via the GPO

    CW, Jan 12, 2004, in forum: Microsoft Windows 2000 Group Policy
    Replies:
    4
    Views:
    193
Loading...

Share This Page