[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 165
  • Last Modified:

Security Auditing

I am just in the process of finalising my Windows Server 2003. Now I have to setup the security logs.

What can be logged? I'd like a list of everything. And where I can setup logs. Also how big can your logs folder become?
What the security events I must log?

0
georgecooldude
Asked:
georgecooldude
  • 2
  • 2
1 Solution
 
harleyjdCommented:
The problem with windoze security event auditing is that it logs too much, and the logs are hard to parse.

The logs are actually stored in event viewer, under security, so there's no easy way to view them. You do have complete control on size, retention time and overwrite options, but it's still pretty useless imho. Right click "my Computer", click "manage" then you'll see the logs...

to turn on the auditing review
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/standard/proddocs/en-us/auditTN.asp

and have a browse through http://www.windowsecurity.com/


0
 
georgecooldudeAuthor Commented:
I've come accross the Microsoft links already.

Are there any guides around on the must haves and the best ways to audit?
0
 
harleyjdCommented:
If you've already found those links then you have all the information at your fingertips...

It's not a simple thing to undertake, not so much because it's hard, but because you just get snowed under...  try this one, anyway...

http://www.windowsecurity.com/articles/Auditing-Users-Groups-Windows-Security-Log.html
0
 
georgecooldudeAuthor Commented:
yeah I found those links ironically helping someone who had a similar question to this. ;)

I'll close this, as you took the time to post =)
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now