Need Help with policy settings

  • Thread starter Thread starter Louis Herndon
  • Start date Start date
L

Louis Herndon

Hello all,

I am trying to track the shutdowns and restarts of my
Win2k servers. I know you can monitor shutdown/restarts
in the eventlog, but where exactly is the setting
or "place" to enable this logging? I am an MCP but
haven't played with this particular setting. I know its
there but I can't seem to find it. Please help!
 
You will need to audit system events. See the description of this below.

Audit system events
Computer Configuration\Windows Settings\Security Settings\Local
Policies\Audit Policy

Description
Determines whether to audit when a user restarts or shuts down the computer;
or an event has occurred that affects either the system security or the
security log.

By default, this value is set to No auditing in the Default Domain
Controller Group Policy object (GPO) and in the local policies of
workstations and servers.

If you define this policy setting, you can specify whether to audit
successes, audit failures, or not to audit the event type at all. Success
audits generate an audit entry when a system event is successfully executed.
Failure audits generate an audit entry when a system event is unsuccessfully
attempted. You can select No auditing by defining the policy setting and
unchecking Success and Failure.

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top