Auditing Questions

[Or]

Does Auditing of events (example is Account Management
Success and failure ) is replicated to a Domain?


What is the difference of doing the audit in Domain
controller and in the Domain level?

 

[Matjaz Ladava [MVP]]

By default Auditing is set on Domain Controllers GPO setting and thus
enforced on all domain controllers. This is enough as account management is
done at DC's so it is audited there.
You could enable auditing on your Domain level. This would affect all your
clients and I don't know that you want to do that.

--
Regards

Matjaz Ladava
MVP Windows Server - Directory Services
(e-mail address removed), (e-mail address removed)

 

[Tomasz Onyszko]

Does Auditing of events (example is Account Management
Success and failure ) is replicated to a Domain?


What is the difference of doing the audit in Domain
controller and in the Domain level?

The difference between domain and Domain controler policy is the scope
of this GPO. SO if You set audtiting settings in the domain policy it
will affect all domain, If You use domain controller policy this will
affect only domain controllers

When You are using this policy be sure You understand the difference
between the logon events and account logon events.