Solved

How to disable logon/logoff auditing for windows server 2003

Posted on 2013-02-07
7
1,001 Views
Last Modified: 2013-02-07
Please see the attachment. My server security log is flooded with logon/logoff events. I must of turned this on a while back and I can't see where to turn it off now. I have checked the default domain controller security settings and default domain security settings but everything is set to not defined. Where can I disable this event logging?

Thanks,

Justin
0
Comment
Question by:JustinGSEIWI
  • 4
  • 2
7 Comments
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 334 total points
Comment Utility
In group policy - computer settings - local policies - security go to the auditing section.

Disable account logon auditing.
0
 

Author Comment

by:JustinGSEIWI
Comment Utility
I checked that setting for each GP. They are all set to not defined. Is there a way I pull up which policy is causing the audit?
0
 

Author Comment

by:JustinGSEIWI
Comment Utility
If I do an RSOP on the DC, it says not defined when I look up the audit policy for account logon.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 166 total points
Comment Utility
In addition when you go to the audit settings you will see

"Audit Account Logon events"
"Audit Logon events"

It is confusing why they named them so similar but more info here

http://blogs.msdn.com/b/ericfitz/archive/2005/08/04/447934.aspx

Thanks

Mike
0
 

Author Comment

by:JustinGSEIWI
Comment Utility
That setting is also set to not defined.

Thanks,

Justin
0
 
LVL 70

Accepted Solution

by:
KCTS earned 334 total points
Comment Utility
Not defined does not mean its not going to happen - you need to set it to DISABLED
0
 

Author Closing Comment

by:JustinGSEIWI
Comment Utility
Thank you!
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now