|
Posted by Roger Abell [MVP] on November 9, 2005, 10:01 pm
Please log in for more thread options
Would you mind clarifying a couple things ? as I am not
sure what it is that you are trying to accomplish.
Questions/comments inlined with your posting below . . .
> We have auditing set at AD to audit certain failures and success events,
do you mean that you are using group policy to enable auditing
of security events in a way that applies to the member machines,
or,
do you mean you have set up to audit upon those certain
failures and successes for specific AD objects
?
> but at a local server we cant get the auditing to log to security log any
> auditing events we put in the directory. I tried auding all
> success/failure for a certain group,
If first, and GPO is supposed to be delivering audit log settings
to members then make sure the GPO is being applied to the member;
but, your saying "success/failure for a certain group" implies you
speak of having adjusted the SACL (auditing permissions) of some
specific things - if so, what things? If these are AD objects then you
would see the event records in the logs of the DCs.
> and logged in as a memebr of that group but nothing gets audited to sec
> log. Im a bit rustry on this so any tips appreciated. Also, Our audit
> policy allows the security log to get up to 16 meg and it is under 1 meg.
>
> thanx
>
> CR
>
> --
> http://QLiner.com
>
> Dilbert's Words of Wisdom: My Reality Check bounced.
>
>
| 
XML Sitemap