Audit Logon (success an failure)

G

Guest

Hello
I have network with two DC. I want to audit success and failure logons in network.
On one DC I create
– domain Security Policy – Audit Account Logon Events – success and failure
- Audit logon events -success and failure

But in Security log on that server I have only Failure Events? where is problem
And also is it posible to display machine name

thank you, for your tim
Djis
 
S

Steven L Umbach

For domain controllers you will need to configure auditing in Domain
Controller Security Policy. After doing such check the effective settings in
Local Security Policy on the domain controllers after running secedit
/refreshpolicy machine_policy /enforce. --- Steve
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Audit Logon Events vs. Audit Account Logon Events 1
Audit Policy 4
Tracking logon and logoff activity 1
Audit Account Logon Events 3
Unexplained 540 Events in Security log on W2K workstation in a dom 0
Bad PAssword Attempts not logged 1
Audit file for failure 4
Auditing Logon Events 2

Top