GPO for Login Success/Failure

[Brian Rodeck]

Please help me straighten out my GPO policies! I want to show user login
success/failure in my single-domain structure.

I have two GPOs connected to the domain root, named sjlc.int. One is the
default domain policy and the other is my password policy. The only thing
set in the password policy GPO is the password policy. I am trying to audit
login success/failure in the default domain policy.

I have set "Computer Config | Windows Settings | Security Settings | Local
Policies | Audit Policy | Audit Logon Events" to "Success, Failure".

I am looking for these events in the security log of the event viewer for
the server listed at the root of the tree. Why am I not seeing any
entries??

TIA for your help!

 

[Steven L Umbach]

To enable auditing for domain controllers, you need to configure auditing in the
Domain Controller Security Policy. --- Steve

 

[Brian Rodeck]

Thanks Steve, exactly what I needed!

To enable auditing for domain controllers, you need to configure auditing in the
Domain Controller Security Policy. --- Steve