Security Basics mailing list archives
RE: audit user logon activity
From: <adisegna () siscocorp com>
Date: Thu, 7 Oct 2004 12:43:23 -0400
Chang, Read any Windows Security guideline paper. You will get information on audition logon events. Check out www.nsa.gov for guide guidelines. Audit Logon events - This category is separate from the "Audit Account logon events". This category will generate a success or failure event when a user logs in or out of the system. Events are also generated when a user connects or disconnects from a system via either an interactive type of logon, or via a network type of logon Audit account logon events - this category will generate success or failure events whenever a domain controller receives a logon request. Arthur DiSegna Information Technology Group Security Identification Systems Corporation -----Original Message----- From: chang zhu [mailto:cyz2000 () yahoo com] Sent: Wednesday, October 06, 2004 3:11 PM To: security-basics () securityfocus com Subject: audit user logon activity Hi, all I tried to find out how to find whether a user logs to multiple computers on the network. From MS security log, I can notfind anything I want to. Is there any windows freeutility which allows to audit a user's log onactivity? (BTW, we are in windows 2000 environment). Thanks, chang __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Current thread:
- audit user logon activity chang zhu (Oct 07)
- RE: audit user logon activity David Nardoni (Oct 07)
- Re: audit user logon activity Josh Mills (Oct 07)
- <Possible follow-ups>
- RE: audit user logon activity adisegna (Oct 07)
- Re: audit user logon activity H Carvey (Oct 07)
- RE: audit user logon activity Jose James (Oct 07)