Security Event Viewer Help

  • Thread starter Thread starter Thomas Grassi
  • Start date Start date
T

Thomas Grassi

Just installed my new Dell Deminsion 3000 with Windows XP Professional and I
am checking the event logs and I find that I have no entries in my Security
event log.

How do I turn on this to track security events?

Thanks

Tom
 
I thought they were started by default...maybe not, but to turn them on, go
to services in the admin. tools, scroll down until you see event log, and
from the drop down box select automatic.
 
Thomas Grassi said:
Just installed my new Dell Deminsion 3000 with Windows XP Professional and I
am checking the event logs and I find that I have no entries in my Security
event log.

How do I turn on this to track security events?

Thanks

Tom
Click to expand...

Those will only be tracked if you have certain securty features setup to trigger an event. e.g. requiring a password to be change after xx days, or # of logons. This is primarily used in a domain setup, where the network admins can setup security policies for the different levels of users. This then will have entries in it when events get triggered for various reasons the system warrants and is setup..

I have Pro aslo, but do not use any of the aforementioned criteria to have events triggered, other than the very first time my system peroformed an audit of my user profile, and cleared the log.
 
Just installed my new Dell Deminsion 3000 with Windows XP Professional and I
am checking the event logs and I find that I have no entries in my Security
event log.

How do I turn on this to track security events?
Click to expand...

Click Start, select Run and enter gpedit.msc. This will open the group
policy editor. Under Computer Configuration expand Windows Settings,
Security Settings, Local Policies, Audit Policy. This will bring up the
list of items that you can audit. Double click each one and you can turn
on auditing of success and failure events for that item.
--
Tom Porterfield
MS-MVP Windows
http://support.telop.org

Please post all follow-ups to the newsgroup only.
 
Thanks It is not working

Tom
Tom Porterfield said:
Click Start, select Run and enter gpedit.msc. This will open the group
policy editor. Under Computer Configuration expand Windows Settings,
Security Settings, Local Policies, Audit Policy. This will bring up the
list of items that you can audit. Double click each one and you can turn
on auditing of success and failure events for that item.
--
Tom Porterfield
MS-MVP Windows
http://support.telop.org

Please post all follow-ups to the newsgroup only.
Click to expand...
 
Back
Top