Question

  • Creator
    Topic
  • #2151662

    Win2k3 – logon / logoff events

    Locked

    by bubloob_13 ·

    Dear ALl

    We are having win2k3 server acting as domain controller for our office. All our workstations are windows XP, joined in the domain.

    My problem is i am not getting logon / logoff
    events of my workstations and server logon & logoff events in event viewer of domain controller. How do I resolve this.Kindly help

    Regards
    Sakthi

All Answers

  • Author
    Replies
    • #2925687

      Clarifications

      by bubloob_13 ·

      In reply to Win2k3 – logon / logoff events

      Clarifications

    • #2925553

      Check your DC’s default

      by ic-it ·

      In reply to Win2k3 – logon / logoff events

      GPO. Auditing is off by default. You may edit the policy to audit the events you desire.
      This will allow auditing of users logging into the domain.
      If you allow logon locally and wish to track these events, you will need to turn on local auditing.

      • #2925978

        Re:

        by bubloob_13 ·

        In reply to Check your DC’s default

        Can u pls. tell me where exactly in GPO and Local Audit
        policy

        • #2925849

          Sure

          by ic-it ·

          In reply to Re:

          For the DC open the GPMC (or AD Users and Computers) Modify the Default Domain Controllers policy;
          It will be this key;
          Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\
          Same path locally.

Viewing 1 reply thread