auditing single user activity

  • Thread starter Thread starter Rowdy Yates
  • Start date Start date
R

Rowdy Yates

hi, is it possible to audit individual user activity?

i'm trying to audit the activities of a single user account. i don't want
to audit everything and then filter the logs.

is that possible?


Rowdy Yates, MCSE
 
Rowdy,

I do not think so. But, what exactly are you trying to audit? As you know,
there are a lot of things that can be audited ;-)

Cary
 
Rowdy,

I do not think so. But, what exactly are you trying to audit? As you
know, there are a lot of things that can be audited ;-)

Cary
Click to expand...

nothing out of the ordinatry. will be auditing system changes, policy
changes, login's e.t.c.. this is non-AD server. but i was wondering if
there was a way to just audit only certrain user object/account activity.
don't want to waste event log space on auditing information for accounts i
know i don't care about.

i didn't think there was, but i thoguth i would give it a try anyway. never
hurts to ask.

Rowdy Yates, MCSE
 
Well kind of. You can enable auditing of object access and then enable auditing of
objects such as folders/files/AD objects for an individual user, however there will
still be lots of seemingly unrelated events in the security log. For auditing of
logons, account management, process tracking, and such there is no way to do so for
individual users. --- Steve
 
Back
Top