N
Neil McFadyen
I have 2 win2000 servers as ads domain controllers, I set the audit
settings in the domain controller policy, however the security log on
one of the servers (actually the one used least) fills up much faster
than the other. I just cleared it about an hour ago and it has reached
30MB already. The other server's log hasn't been cleared for a week and
is only at 31 MB.
my audit policy is set to:
Audit account logon events Success, Failure
Audit account management Failure
Audit directory service access Success, Failure
Audit logon events Success, Failure
Audit object access Failure
Audit policy change Success, Failure
Audit priviledge use Success, Failure
Audit process tracking No auditing
Audit system events Success, Failure
so why is the one of server's security log filling up faster than the
other?
and
what is the difference between account logon events and logon events?
settings in the domain controller policy, however the security log on
one of the servers (actually the one used least) fills up much faster
than the other. I just cleared it about an hour ago and it has reached
30MB already. The other server's log hasn't been cleared for a week and
is only at 31 MB.
my audit policy is set to:
Audit account logon events Success, Failure
Audit account management Failure
Audit directory service access Success, Failure
Audit logon events Success, Failure
Audit object access Failure
Audit policy change Success, Failure
Audit priviledge use Success, Failure
Audit process tracking No auditing
Audit system events Success, Failure
so why is the one of server's security log filling up faster than the
other?
and
what is the difference between account logon events and logon events?