General discussion

  • Creator
    Topic
  • #2188954

    538 events not logged on Win2K Pro

    Locked

    by dharwell ·

    Greetings. I am setting up stand alone workstations for a secure government area. There is a security requirement for these systems to log an event code 538 upon user logoff. To date, I have applied two seperate Microsoft hot fixes, neither of which resolved the issue. My question is, is there any way to force this event to log. Keep in mind that the audit policies have already been configured to log this event type.

All Comments

  • Author
    Replies
    • #3044566

      Reply To: 538 events not logged on Win2K Pro

      by sgt_shultz ·

      In reply to 538 events not logged on Win2K Pro

      what have you tried, dear? besides the hotfixes, and which were those?
      do you have the system configured to log successful events?
      did you look at all the articles about this at support.microsoft.com

    • #3044426

      Reply To: 538 events not logged on Win2K Pro

      by dharwell ·

      In reply to 538 events not logged on Win2K Pro

      In response, there are two hotfixes available from Microsoft, both of which have been applied. I have been researching this with Microsoft support for 3 days now. Audit policies are set to log both successes and failures.

Viewing 1 reply thread