Discussion Locked

No logs in Security Event Viewer

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there some thing wrong with my server I open up event viewer under Security and there are no Logs in there, running NT 4.0 service pack 6

7 replies

by dman76

You need to open up User Manager->Policies->Audit and check "Audit these events" and select the items to audit, eg, Logon and Logoff, check both 'Success' and 'Failure'. You will then see events in your security log.

by dark force

Nothing is wrong. You just don't have any security items being audited.

You can enable auditing through User Manager-->Policies-->Audit. In the window that opens, you can choose which events you wish to audit.

by rabbit_runner

The above answers are correct. But there is another item you need to consider. If the computer is a PDC or BDC, the above info will work fine. But if the system is a member server, or workstation, you will need to adjust one item.
Open the User Manager. From the file menu, select 'domain'. In the box that opens up, type the name of the computer you are at. This changes the user manager from the domain level to the user manager of the computer you are seeking to audit. Then, follow the above steps.

Hope this helps.

This discussion is closed to new replies.