Can't audit security events

23 Mar 2006 5:16 PM

Vic

Heres my problem:
There is a webserver at work, win2k, that originally was joined to the
domain, but is always logged on locally.

We can't get it to audit security events - domain policies override local
policies. We logged on with an admin account from the domain to attempt to
look at the local security policy but it has a red x on it and says we don't
have rights.

We'd really like to be able to audit the logons on this machine but have no
idea on how to get it working.

Any help is much appreciated!

26 Mar 2006 10:54 AM

Ken Schaefer

This isn't really an IIS question.

What you want to do is download GPMC (Group Policy Management Console) from
the Microsoft website.
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

GPMC can be run from any Windows Server 2003 box or Windows XP SP2 box.

Use the RSOP (Resultant Set of Policy) modelling component of GPMC to
determine what policy is denying you the right to enable logon auditing on
the Win2000 box. Alter that policy as required.

Cheers
Ken

Show quoteHide quote

"Vic" <V**@discussions.microsoft.com> wrote in message
news:609D1577-DEBC-4AF0-95D5-74939405B19B@microsoft.com...
: Heres my problem:
: There is a webserver at work, win2k, that originally was joined to the
: domain, but is always logged on locally.
:
: We can't get it to audit security events - domain policies override local
: policies. We logged on with an admin account from the domain to attempt to
: look at the local security policy but it has a red x on it and says we
don't
: have rights.
:
: We'd really like to be able to audit the logons on this machine but have
no
: idea on how to get it working.
:
: Any help is much appreciated!
: