Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 266
  • Last Modified:

Event ID's for DC authentications

Hi Guys

We are running Windows 2003 Domain Controllers in our environment.

On one of the DC's, I would like to get info on every person who has authenticated against it over 24 hours, and also the number of authentications.

I guess I can do this using Event ID's and Event Comb, but I'm not sure of which Event ID's to actually filter against?
0
kam_uk
Asked:
kam_uk
1 Solution
 
KCTSCommented:
You need to enable the auditing of Account Logon in the security policy, the ID is 672
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now