Are the Security Event Viewer logs replicated to the other DCs?  Or are they all unique among DCs?

Posted on 2008-11-10
Last Modified: 2012-05-05
I am writing a policy because we have to audit or domain controller secuirty logs.  My question is we have 3 domain controllers.  Do I have to audit the security logs on each one or are the logs all replicatited with the same events?
Question by:MNBTech
    LVL 10

    Accepted Solution

    You need to audit on each. They are not replicated.
    LVL 10

    Expert Comment

    You can use the EventCombMT tool from Microsoft to search for specific events across multiple servers/Domain Controllers.

    The tool is free for download from the MS site.

    Author Closing Comment

    Wow this tool is great.  Thank you so much!

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now