Windows Forum

Ask something
Discussion Locked

NT4 Member server has empty security log

0 helpful
9 replies

by gunnersixz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

NT4 Member server has empty security log
I have a NT 4member server that is not a bdc but it is connected and authenticated to the NT domain. Every time I go to the security log it is blank. What Am I doing wrong? Under user manager it shows that Auditing is turned on. I applied auditing on the C drive and added the everyone group but after the auditing permission was applied to all files on the C drive, a message came on telling me to turn on auditing by using user manager. Please help

9 replies

by gunnersixz

Thanks! for taking the time to write, My PDC does not record others in the domain but I should make that change. I appreciate your input

by gigelul

I think that when you open User Manager you enabled audit on domain. If I understand correct you wish an audit on a standalone server. For that, when you open User Manager from the menu, User \ Select domain, you must change domain to local (server name). After that you can enable audit and you will have events in security log for that server.

by gigelul

About answer3: no matter if you login as Domain Admin if you follow my indications.

by 1nfo

You have to enable audit on the member server.
log in to member server as a local admin not domain admin. start user manager, select policy, click on audit, select options "file /object". Then decide whethe you which audit success or failure. Normally i would choose failure.

by ch_thies

Member Servers has their own accounts, so you must access drive c of the member server with a user created on the member server machine to generate security log activity.

Then, you must create a user account on the member server, and enable auditing on the resource and the account or group that holds that account.

Hope this help you

Chris

This discussion is closed to new replies.