[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 329
  • Last Modified:

Auditing tool

Normally, administrator need to enable auditing for the resource, but in large domain, it is hard to enable all the resource on all the PC, Is there any tool to audit the user's activity in win 2k domain - when, what and where ?

0
joehuang
Asked:
joehuang
  • 3
  • 2
1 Solution
 
LuxanaCommented:
Hallo joehuang

Windows 2000 has 2 Audit Policy Settings;


1 - Audit account logon events

2 - Audit logon events

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windows2000serv/maintain/monitor/logevnts.asp
 


0
 
joehuangAuthor Commented:
Luxana,

The most diffcult request is,
For example, There are 1000 files or directory in PC, I need to enable the "audit object access" in GPO, then go to each PC, right click each partition/driver | property | security | advanced | auditing | add everyone | select reset all on child object.., there are 200 PCs that I need repeat same setting, Next, they will creat a huge log file on each PC.  Is there any way to simplify this type of job ? I hown this example is kind weird, But I just try to find a way to answer the request from my top level guy, "how do you know which files is accessd by who?", "How many PC this user acces to and What files are accessed by the user?".
0
 
LuxanaCommented:
hallo joehang

I understand,
You probably read all of this stuff but just in case:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q300549&sd=tech

I hope that you get answer otherwise......
0
 
joehuangAuthor Commented:
Thanks for all the information.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now