General discussion

Locked

Account logon events

By DMA1985 ·
Can I have my windows 2000 DC log Account Logon Events and view them in a single event log? if so how?

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Account logon events

by Johnny:P In reply to Account logon events

You might want to try using the Filter Events option then select Source:Security and Category: Logon/Logoff. Otherwise I've seen some apps that can import this info then allow you to filter, but event viewer can do an ok job of this too.

Collapse -

Account logon events

by HuckleberryHound In reply to Account logon events

The answer depends on what exactly you are looking for. If you just want to get the last login date for users then you might want to use the freeware application DUMPSEC from www.somarsoft.com

If you need more detailed information then you mightwant to enable debug logging on your domain controllers.
http://support.microsoft.com/default.aspx?scid=kb;en-us;109626

This will create the following log file on your domain controllers:
C:\WINNT\Debug\Netlogon.log

I leave debug logging on all of the time and it does not seem to cause any performance problems and is often usefull for tracking down which machine a user is trying to log in from.

Back to Security Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums