General discussion

Locked

log sessions of user on server

By vtbinhsg ·
Please tell me how to log everything that users have made on server in Windows 2000 environment.
Thanks.

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

log sessions of user on server

by maxwell edison In reply to log sessions of user on s ...

Event Viewer lets you view the NT/2000 Event Log for either a local or remote NT/2000 system. A color signals its priority: Yellow is for a warning event, blue signals an informational event, and red signifies a warning event. Event Viewer also shows the date and time the event was generated and the event ID, the user, and the computer on which the event was generated.

The three types of NT event logs are:

* System log, which tracks miscellaneous system events (for instance, the systemlog tracks events during system startup and hardware and controller failures)

* Application log, which tracks application-related events (for instance, some applications generate informational messages that appear as entries in the Application Event Log; application errors such as failing to load a DLL can also appear in the application log)

* Security log, which tracks events such as logon, logoff, changes to access rights, and system startup and shutdown. However, by default, the security log is turned off. To track security events with Network Security Monitor, you must start NT event logging on the target remote systems. To enable NT security logging, you must sign on with a user ID that has administration rights. Then from theStart Menu, choose Program and then Administrative Tools (Common). From the Administrative Tools submenu, choose User Manager, which displays the User Manager window. Select Audit from User Manager's Policies menu to display the audit dialog.

Some helpful links:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;q315147&

http://www.jsifaq.com/SUBK/tip5400/rh5424.htm

http://www.sunbelt-software.com/evaluation/920/web/documents/whitepaperhtm.htm

http://windows.about.com/library/weekly/aa000618a.htm

http://www.winnetmag.com/Articles/Index.cfm?ArticleID=2830

REMOVE SPACES from the pasted URLs.

Back to Networks Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums