How to stop local system user login event audting
Posted on 2004-11-24
I have a windows 2003 server which is a domain controller. This system logs a huge amount of local System user login / logouts in the event log (lots for Network Service also). I know that I can filter the event log viewer to not display succesful events, but if it is possible I would like to stop recording System login / logout events.
I do not have login auditing defined in the default domain group policy; however it is defined and enabled for some user OU's