Solved

Where are our log files?

Posted on 2004-08-02
2
152 Views
Last Modified: 2010-04-13
We have set up a group policy within the default domain policy, specifically the audit policy, yet we have not received any information into the event logs.  Why would this be?
0
Comment
Question by:constance_gould
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 11699998
There's two steps to enabling file auditing.
1) Enable auditing:  http://support.microsoft.com/?kbid=248260
2) Determine what you want it to apply to (right-click a folder, for example, choose properties.
Under the Security tab, click Advanced, then the Auditing tab.  Now you can determine which accounts you want to audit from here, Everyone for example, click OK and you will be presented with a list of items, success or fail, that you want to audit...
These will of course, be displayed in your security logs (Start->Run->Eventvwr)
0
 
LVL 3

Accepted Solution

by:
saito1 earned 500 total points
ID: 11702461
after changing anything in policy run the commands
secedit /refreshpolicy machine_policy /enforce
secedit /refreshpolicy user_policy /enforce
because if may take 90 minutes to effect. in event viewer go to scurity tab to see audit logs.

related articles:

http://support.microsoft.com/default.aspx?scid=kb;en-us;315416&Product=win2000#3

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549&Product=win2000
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question