Click here to get back home

Logon/Logoff Events in Local Security Log of Terminal Server
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Logon/Logoff Events in Local Security Log of Terminal Server NW 07-20-2007
Posted by NW on July 20, 2007, 2:39 pm
Please log in for more thread options
 When reviewing some logon times for a user of Terminal Server I notice many
logon events are recorded in the TS local security log.

But the user in question's logon events seem to only be recorded on the
domain controllers, which is what I expect. Audit policy for the domain
controllers and terminal servers are at the default settings.

Any hints on why this might be?



Similar ThreadsPosted
audit logon/logoff events on terminal server July 18, 2007, 10:29 am
Multiple 538 and 540 ID's in 2003 server Security Events Log? August 23, 2006, 12:58 am
Sharing a Local Printer in Terminal Server December 5, 2006, 2:50 pm
Sharing a Local Printer in Terminal Server December 5, 2006, 2:50 pm
Auditing Security Events May 10, 2007, 1:54 am
Follow-up to Empty 529 Events in Security Log July 27, 2006, 12:02 pm
Security Log - Events 680, 529 and 675 for NT AUTHORITY\SYSTEM every two minutes February 5, 2006, 11:50 am
How to store windows events log in remote server July 31, 2005, 6:44 pm
Deny Right to Local Admin Group to Log On Via Terminal Services? May 24, 2007, 12:28 pm
Security bug in terminal services? May 4, 2006, 4:02 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap