audit logons

  • Thread starter Thread starter JC
  • Start date Start date
J

JC

Hi:

I have a domain controller with the "account logons" audit activated. I want
to audit logons for only the users of some Organizational Unit, not for all
the users of the domain.
The problem I have is that all logons (for all users) generate an "event"
and I just want to audit logons for a particular Organizational Unit. Is it
possible?

Thanks,
Juan Carlos
 
nope.
but you can export the log and then filter it using a script. (I haven't
tried this yet so don't ask me how).
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Windows 2000 domain / Account logon auditing 1
Audit logon and logoff times 1
User auditing 2
Security Auditing 1
Faliure Audits from nowhere 1
Audit account logon events causes security log meltdown :( 1
auditing 1
SecPol Audit Policy: Diff between "Audit account logon events" and "Audit logon events" ? 2

Back
Top