• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1511
  • Last Modified:

Auditing Account Logon Events SERVER 2003

On a WIN 2003 Server I am a local ADMIN as well as a DOMAIN admin. I am going to start/programs Administrative Tools Local Security Policy.

From there I am expanding Audit Policy and trying to turn on AUDIT ACCOUNT LOGON EVENTS for both success and failure. Currently it is set to audit for failure only. When I go into the properties of this setting the boxes are greyed out indicating I cannot change them.
Why is that or how can I fix??
I am using remote control to work on the server.
3 Solutions
Is this a domain controller?  If so, go to the Domain Controllers OU, and edit these options on the Domain Controllers Default GPO.  See if that works for you...
Brian_BlairAuthor Commented:
No, It is not a DC
Steve McCarthy, MCSE, MCSA, MCP x8, Network+, i-Net+, A+, CIWA, CCNA, FDLE FCIC, HIPAA Security OfficerIT Consultant, Network Engineer, Windows Network Administrator, VMware AdministratorCommented:
It seems to me that you are getting the local policy pushed from the Domain.  Go to the Domain Policy and see if your Audit settings are set there.
They are greyed out because it's taking the policies from Active Directory.
1) Check in which OU is that Server.
2) Open the properties for that OU and go to "Group Policy" Tab.
3) Check which policies are afecting that server in the "Group Policy Object Links" list.

If you want to modify those computer security settings for that server, you'll have to do it by modifying the policy.... (selecting it from that list, and clicking on 'Edit').

Hope it helps !


Featured Post

Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now