Windows Active Directory Logging - Log Admin Account Access ?
On a Windows Server 2012 R2 Active Directory is there some way to log successful logons by Domain Admins and Local Admins by using the built-in Windows Server Event Viewer and Domain/Local Security Policies (i.e. without having to purchase third party logging utilities) ? TIA ...
Do more with
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Yes, configure the Audit Policies.
You'll want to audit account logon events on your DCs (this will log any domain account logon) and on the computers with local accounts you want to monitor (this will log the local accounts)
This can be configured through group policy:
Computer Configuration\Policies\Win
If you want more granular control, you can use the Advanced Audit Policy Configuration:
Computer Configuration\Policies\Win
You'll want to audit account logon events on your DCs (this will log any domain account logon) and on the computers with local accounts you want to monitor (this will log the local accounts)
This can be configured through group policy:
Computer Configuration\Policies\Win
If you want more granular control, you can use the Advanced Audit Policy Configuration:
Computer Configuration\Policies\Win
Premium Content
You need an Expert Office subscription to comment.Start Free Trial