Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 448
  • Last Modified:

Server 2003 Audit Policy

I want to change logon event and directory service acces event auditing.  On my GPO Editor: Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy these items are set for Sucess.  Yet when I go into edit them the check boxes are grayed out so they can't be changed.  Where is this being controlled from?

Is there a script, program (already installed on 2003) that I can run that will show me these settings - effective GPOs - what's on or off, enabled or disabled?
0
xmouser
Asked:
xmouser
  • 2
  • 2
  • 2
2 Solutions
 
CaptainGibletsCommented:
So your editing Group Policy on a domain controller and the option to change loggin was turned off? Or are you changing it through the Domain Controller Policy.

Run this command "rsop.msc"

This will open a list of all the policies applied to the computer and the username

Alternatively you can run gpresult from the command line

0
 
xmouserAuthor Commented:
My apologies, I'm running a small domain and I have been working on the DC.  I'll check rsop/gpresult shortly.
0
 
xmouserAuthor Commented:
That gave me quite a bit of info but I still can't find where this is controlled from or where I can make changes to these settings.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
CaptainGibletsCommented:
if rsop didnt return anything have you gone onto the DC and looked at either the local domain policy / domain controller policy
0
 
jgpdCommented:
check if your  account is member of Group Policy Creator Owners group
Regards,
Jose
0
 
jgpdCommented:
If those options are greyed out that means they are being controlled at the domain level by group policy.
on your DC open your group policy management and edit the default domain  policy
regards,
Jose
untitled.JPG
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now