RE: Win2k Audit+AD settings

["Doug Nixon" <DougNixon () utilyx com>]

Hey xyberpix,

In AD, domain wide auditing is set through Group Policy? You can access
group policy by running mmc from the command line on a domain controller
and adding the group policy snap in. To see what policies are effecting
a machine gpresult (run from the command line) will show you (on XP
machines) which Group Policies are effecting that machine, to see what
exact policies are in effect run gpresult with the /V switch. From there
you can look at the breakdown of the auditing policy through Group
Policy in AD. This reference should help with that -
http://searchwin2000.techtarget.com/originalContent/0,289142,sid1_gci966
312,00.html

To see if the machine has any locally set policies its under -> control
panel -> admin tools -> local security policy.

Hope this helps.

Doug

-----Original Message-----
From: xyberpix [mailto:xyberpix () xyberpix com] 
Sent: 03 November 2004 19:05
To: Security Basics[List]
Subject: Win2k Audit+AD settings

Hi All,

How can I find out what has been set in the AD for a certain machine?
I know that if I go into Computer Manager, nothing shows up there, as I
was looking at a machine today, and no event logging seemed to be set,
but yet it was set in the AD. So how do I go about obtaining this
information from being on the host machine?
Thanks to anyone who replies, as this is probably an easy one to answer,
but I've always been a *nix person, so this whole AD thing is still new
to me.

xyberpix

--
For Security and Open Source news:
http://xyberpix.demon.co.uk