group policy; how to track logins

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I'm trying to track when a user logs in and any failed logins (wrong
password). I set Audit logon events in the local policies section of my
group policy but I'm not getting anything. Is this the right way to do it,
or any suggestions are welcome
 
"Audit logon events" is for local logons only. Enable the "Audit Account
Logon Events" for domain accounts.
 
I enables "Audit account logon events" but that still seems to only log them
on the actual PC. When you said 'for domain accounts' I did not see anything
that specified for domain accounts, am I missing something? You're still
talking about doing it through group policies, right?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top