Windows Forum

Ask something
Discussion Locked

Empty Security Event Log

0 helpful
5 replies

by _getz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have been working on auditing of files and on some NT Servers there is no information showing in the Security log. The PDC for the domain has auditing turned on and the server itselft has auditing turned on. I then went into the security tab of the file and under the auditing tab added the administrator and selected success on all events just for a trial. Under the Security menu nothing shows up and the log settings are set to overwrite. Is there anything that I have not mentioned that should be done?

5 replies

by avachon

Hi, is auditing enabled under user manager for domains? You say auditing is turned on but I can't tell if the step via user manager for domains was done (as well as setting up auditing for specific files/folders, etc.). Hope this points in the rightdirection.

by _getz

The reply was not unnaceptable. I've replied to the request for more info and have not heard back.

by green lantern

In Microsoft's logic you must go to User Manager for Domains - Policies - Audit. Here you indicate those items you want audited. These audits will show up in your Security Event logs.

This is the only step you left out to get security up and running.

ralph

This discussion is closed to new replies.