logging

[ss]

Hi
I turner on logging on the server to monitor logon access.
At first I checked success and failure. then I unchecked the Success marker.
However the system still reports all successful logon

How can I stop this. I only want to see the failures.

-ss

 

[Steven L Umbach]

In Local Security Policy look at the "effective settings" to see what they
are. You may need to change the policy at the domain/OU/domain controller
container security policy level if the change does not work at the local
level. You can use gpresult to see where computer policy is being applied
from and the last time it was refreshed. --- Steve