W2K SERVER AUDITING

[Bobby]

I AM TRYING TO AUDIT USER LOGONS AND LOG OFFS, SUCCESSES
AND FAILURES. I HAVE TURNED THOSE ON WITHIN THE LOCAL
COMPUTER POLICY, BUT THEY DO NOT SHOW IN THE AUDIT LOG. I
HAVE NOTICED THAT WITHIN THE LOCAL COMPUTER POLICY, THE
EFFECTIVE SETTING SAYS " NO AUDITING". WHAT ELSE NEEDS TO
BE TURNED ON? THANKS

 

[Steven L Umbach]

Apparently you are talking about a domain computer that has policy
configured at a higher precedence level to have no auditing. If this is a
domain controller, configure it at the Domain Controller Security policy
level. If not a DC, then it will need to be configured at the
domain/Organizational Unit level. --- Steve