[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 152
  • Last Modified:

Events not appearing on domain's security log

I'm trying to track down user activity with the windows group policy.  The problem is that the domain's security log is empty and the activities are being recorded to each computer's local secuirty log.  Is there a way to have all user activities recorded to one security log versus on each computer?  Thanks.
0
doomedtech
Asked:
doomedtech
  • 3
  • 3
1 Solution
 
Jay_Jay70Commented:
Hi doomedtech,

can you imagine the size of the logs you would create! you can copy the actualy log files from each machine, but event are stored locally unless you enable security auditing with GPO and then your security logs are stored on your server
0
 
doomedtechAuthor Commented:
I just want to log user logon times, so hopefully it won't get out of hand.  Could you lead me in the direction to enable the security logs on the server?
0
 
doomedtechAuthor Commented:
*clarification* enable to store each user logon information on the server's security logs.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
Jay_Jay70Commented:
open up your default domain policy,

computer settings \ windows settings \ security settings \ local policies \ audit policies \ audit logon events

that should do it for ya
0
 
doomedtechAuthor Commented:
Thanks!  Now its time to find some software to analyze the logs.
0
 
Jay_Jay70Commented:
:) thats certainly an interesting one!
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now