Security Event Log Blank

J

Jake

Win2K Server SP4 Security Event log is blank even though
I have setup all GPOs to log security events. It only
records action taken when logged locally as admin. Local
Security Policy has "Audit Account Managment" checked but
nothing is checked in effective settings. I have
refreshed the Machine and User policies several times.
Any ideas?
 
S

Steven L Umbach

Make sure the server is in the scope of influence of the GPO. Domain controllers have
settings defined in the Domain Controller Security Policy which is where their
settings should be configured. Using gpresult can help troubleshoot Group Policy
issues. You may also want to run netdiag on that server, looking for any failed tests
that may help troubleshoot the problem. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;250842
http://support.microsoft.com/default.aspx?scid=kb;en-us;827664 -- May be applicable
also.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Win2K Auditing / Security Event Log Problems 2
Object Access Audit Policy for a Domain 4
Bad PAssword Attempts not logged 1
Dell PC won't log security events 1
Auditing Logon Events 2
Where this Audit Polciy comming from? 4
Too many Logon/Logoff security log entries 5
cant get local security - error opening database 2

Top