log file how to?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hi
as a system administrator, i would like to view all the details partaining to login issues like who all have logged in, what did they work upon, their login timings, what files they have browsed etc etc... what ever an administrator would think upon as security measures. this datas must be automatically stored rather then myself manually saving the
files

how can this be done. we have win2k server and win Xp as clients and is domian environment

any suggestio
aken
 
You can use Windows auditing to record all such events. However, you will
want to spend some time developing a manageable auditing policy rather than
trying to audit everything. - See:

http://www.microsoft.com/technet/security/guidance/secmod144.mspx

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

aken said:
hi,
as a system administrator, i would like to view all the details partaining
Click to expand...
to login issues like who all have logged in, what did they work upon, their
login timings, what files they have browsed etc etc... what ever an
administrator would think upon as security measures. this datas must be
automatically stored rather then myself manually saving the
 
You can enable auditing on your computers however for what you would want to do you
would need to audit everything and then enable auditing on all folders on the
computer which is not practical as it would generate thousands and thousands of
events in the security log and substantially decrease computer performance. I would
start at enabling of logon events , account management, and object access. The enable
auditing of just sensitive folders and possible the executable files of programs you
want to monitor. You can also audit process tracking, but a gain you will generate a
lot of events. The trick to auditing is to just audit enough to get the info you
ant - not everything. You can use filter view in Event Viewer to look for certain
events in the security log and use Event Comb to scan the logs of multiple computers.
The link below should be helpful. --- Steve

http://www.microsoft.com/technet/security/guidance/secmod144.mspx
http://support.microsoft.com/default.aspx?scid=kb;en-us;301640

aken said:
hi,
as a system administrator, i would like to view all the details partaining to login
Click to expand...
issues like who all have logged in, what did they work upon, their login timings,
what files they have browsed etc etc... what ever an administrator would think upon
as security measures. this datas must be automatically stored rather then myself
manually saving the
 
Back
Top