Solved

Auditing tool

Posted on 2003-10-28
5
325 Views
Last Modified: 2010-04-14
Normally, administrator need to enable auditing for the resource, but in large domain, it is hard to enable all the resource on all the PC, Is there any tool to audit the user's activity in win 2k domain - when, what and where ?

0
Comment
Question by:joehuang
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 10

Expert Comment

by:Luxana
ID: 9639725
Hallo joehuang

Windows 2000 has 2 Audit Policy Settings;


1 - Audit account logon events

2 - Audit logon events

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windows2000serv/maintain/monitor/logevnts.asp
 


0
 

Author Comment

by:joehuang
ID: 9642523
Luxana,

The most diffcult request is,
For example, There are 1000 files or directory in PC, I need to enable the "audit object access" in GPO, then go to each PC, right click each partition/driver | property | security | advanced | auditing | add everyone | select reset all on child object.., there are 200 PCs that I need repeat same setting, Next, they will creat a huge log file on each PC.  Is there any way to simplify this type of job ? I hown this example is kind weird, But I just try to find a way to answer the request from my top level guy, "how do you know which files is accessd by who?", "How many PC this user acces to and What files are accessed by the user?".
0
 
LVL 10

Accepted Solution

by:
Luxana earned 20 total points
ID: 9647244
hallo joehang

I understand,
You probably read all of this stuff but just in case:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q300549&sd=tech

I hope that you get answer otherwise......
0
 

Author Comment

by:joehuang
ID: 9650937
Thanks for all the information.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others.  This conference is aimed mainly at government agencies.  So it addresses the various compli…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

687 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question