Windows 2000 domain / Account logon auditing

[Guest]

I am looking to log logon success and failures of one particular account on
my W2k domain. I have logging enabled in my Group Policy for "Audit account
logon events" both success and failure, and "Audit logon events" for success
and failures, but I'm a bit lost on the next step. In ADUC, do I select the
particular user, and delve into the security properties page, audting tab?
if so, what do I need to enable here?

Any guidance would be appreciated.

chris

 

[Herb Martin]

I am looking to log logon success and failures of one particular account on
my W2k domain. I have logging enabled in my Group Policy for "Audit
account
logon events" both success and failure, and "Audit logon events" for
success
and failures, but I'm a bit lost on the next step. In ADUC, do I select
the
particular user, and delve into the security properties page, audting tab?
if so, what do I need to enable here?

Any guidance would be appreciated.

No, you cannot log it for "one user" -- you could audit Logon events for
one or an entire OU of computers (everyone who logs on there) or for
the domain (all users).

You can easily filter out the events you need to see however, either
manually
in Event Viewer or with a script written in something like Perl or VBS.