Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 159
  • Last Modified:

Where are our log files?

We have set up a group policy within the default domain policy, specifically the audit policy, yet we have not received any information into the event logs.  Why would this be?
0
constance_gould
Asked:
constance_gould
1 Solution
 
sirbountyCommented:
There's two steps to enabling file auditing.
1) Enable auditing:  http://support.microsoft.com/?kbid=248260
2) Determine what you want it to apply to (right-click a folder, for example, choose properties.
Under the Security tab, click Advanced, then the Auditing tab.  Now you can determine which accounts you want to audit from here, Everyone for example, click OK and you will be presented with a list of items, success or fail, that you want to audit...
These will of course, be displayed in your security logs (Start->Run->Eventvwr)
0
 
saito1Commented:
after changing anything in policy run the commands
secedit /refreshpolicy machine_policy /enforce
secedit /refreshpolicy user_policy /enforce
because if may take 90 minutes to effect. in event viewer go to scurity tab to see audit logs.

related articles:

http://support.microsoft.com/default.aspx?scid=kb;en-us;315416&Product=win2000#3

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549&Product=win2000
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now