Audit login times

J

John C. Weldin

I setup auditing in the domain security policy to log when users
successfully logon; however, I do not see the events in the event viewer. Am
I missing something?
 
O

Ozone

Be sure that you are looking in the Security log on the DC that was used by
the client for the login.

Ozone
 
J

John C. Weldin

I only have one server, and I checked the security log, and there is nothing
in it.

I modified the Domain Security Policy in Administrative Tools. I reloaded
the policy after I modified it. Should the server have been restarted?
 
S

Steven L Umbach

I am not sure of what you mean by reloaded, but try secedit /refreshpolicy
machine_policy /enforce. Also check the Local Machine Policy to see if the
"effective" setting is what you expect that would indicate that the policy has been
inherited. If troubles persist try running netdiag and dcdiag on the domain
controller looking for any failed tests that may indicate a misconfiguration
issue. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;it;227302
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top