Monday November 23 2009

GotFrag Hardware Forums

event view; security

1
22% Ranking 22% Ranking 22% Ranking 22% Ranking
0 Frags
+   -

SUCCESS AUDIT

does this mean anything? my friend is curious. can anyone briefly explain this? i have heard if it says anonymous user means someone as access to you computer, but then again, i never had this for myself. im trying to help a friend out. if anyone can help me out, let me know, thanks.
2
4% Ranking 4% Ranking 4% Ranking 4% Ranking
0 Frags
+   -

b0red much?
3
25% Ranking 25% Ranking 25% Ranking 25% Ranking
0 Frags
+   -

Kudos to Super Gumby who pointed me toward the true path (the light at the end of tunnel) on how to properly disable those success audits. (As an aside, I'm not recommending that you do this. But if you want to learn ... keep reading).

1. Open up your Server Mgmt Console, and drill down as follows:
-Advanced Management
-Group Policy Management
-Forest (your server)
-Domains
-(Your Server)
-Domain Controllers

2. Right click on 'Small Business Server Auditing Policy' and then click Edit.

3. The Group Policy Editor displays. Drill down as follows:
-Computer Configuration
-Windows Settings
-Security Settings
-Local Policies
-Audit Policy

4. On the right panel you will see that 'Audit logon events' is set to record both Success & Failure events.

5. Double click on 'Audit logon events' and uncheck 'Success'. Click Apply > OK, close the GP Editor and you're done!

Good luck!


*I DO NOT TAKE CREDIT FOR THIS - GOOGLED

Submit Comments

Registered Users Only

In order to post comments, you must be a registered member. If you have not registered, it's free and easy!

Latest Poll