Question Locked

Win2k3 - logon / logoff events

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Dear ALl

We are having win2k3 server acting as domain controller for our office. All our workstations are windows XP, joined in the domain.

My problem is i am not getting logon / logoff
events of my workstations and server logon & logoff events in event viewer of domain controller. How do I resolve this.Kindly help

Regards
Sakthi

4 replies

by ic-it

GPO. Auditing is off by default. You may edit the policy to audit the events you desire.
This will allow auditing of users logging into the domain.
If you allow logon locally and wish to track these events, you will need to turn on local auditing.

by bubloob_13

Can u pls. tell me where exactly in GPO and Local Audit
policy

by ic-it

For the DC open the GPMC (or AD Users and Computers) Modify the Default Domain Controllers policy;
It will be this key;
Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\
Same path locally.

This discussion is closed to new replies.