Domain Security Policy

G

Guest

On Win2K Server, I have enabled some of the Audit Policies under Local
Policies in Domain Security Policy. How can I audit them? Do they get logged
in event viewer?

How can I audit, if a user was added, deleted or its group membership was
changed? And who changed it?
 
A

Arc J. Thames

All security audit events end up in the "Security Log" in event viewer.
For auditing account adds/deletes...audit "Account Management" events.

Arc
MCSE/MCSA 2k/2k3, MCT
 
G

Guest

Thanks Arc
I do have "Audit Account Management" enabled for Sucess and Failure for a
while. I created 2 new uses but I don't see any log in Security events. What
could be wrong?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

domain policy audit question 1
Audit object access - failure audit 0
A New Vista Security Policy on Audit:Force Audit Policy Subcategor 1
applying audit policy to detect security voilations 1
Local Setting vs Effective Setting 2
Auditing policy change within the domain...help 1
Problems with Security Policy 1
Domain Security Policy Versus Domain Controller Security Policy 2

Top