General discussion

Locked

Under-the-Hood enabling of Security Log

By Erlu ·
I need to be able to enable/edit auditing/security logging in windows NT 4.0 server via command line or registry modification. I am open to direct registry mods or utilities that get the job done....so long as user interaction is not required.

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Under-the-Hood enabling of Security Log

by Joseph Moore In reply to Under-the-Hood enabling o ...

Well, enabling the Security log in Event Viewer is easy.
Open up User Manager on this server, then click Options -> Audit.
Then select the Success and/or Failure columns for any of the items listed. If you want to audit logons and logoffs, then select the Success and Failure for Logon and Logoff! For most of the auditing features, that is it. Once you check the boxes, you will then start to get records in the Security log. For the file usage auditing (like who opened FILEX on the server) you then need to enable the specific files/folders to be audited from within Windows Explorer (you select the files/folders to be audited, then go to the Properties, Security Tab, and Auditing. This only works if your NT server is NTFS partitioned).
Now, Editing the Security log is another thing entirely. There are no Microsoft-produced tools that will let you edit the entries in the Security log. There are some 3rd party tools, though, that will let you. But I have to wonder, WHY do you want to edit the Security log? Typically, requests like this are for nefarious reasons. We don't know if you want to edit the logs on your own servers, or the logs on someone else's server without their permission!
So, I am not gonna help with editing the logs. Too dangerous.

Collapse -

Under-the-Hood enabling of Security Log

by Erlu In reply to Under-the-Hood enabling o ...

The question is specific for command line/non user interactive enabling of the security log. Editing the security log was not requested.

Collapse -

Under-the-Hood enabling of Security Log

by Erlu In reply to Under-the-Hood enabling o ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums