Results 1 to 2 of 2

Thread: user account audit not recording in event viewer

  1. May 5th, 2005, 08:38 PM #1
    Gixxer
    Gixxer is offline
    Member
    Join Date
    Jan 2002
    Posts
    61

    user account audit not recording in event viewer

    Hey guys

    I running a Win2K domain, with active directory (AD). I have security auditting running via the 'default domain controllers' policy. I am setup to audit success and failure events for account management. When I go into AD, connect to domain controller A and disable or enable a user account I will not see the corresponding event 629 or 626 logged in the event viewer. What is going on here, am I missing something? I have other events that are showing up in there from out on the domain just not the enable or disable user accounts like I am looking for.

    Thanks
    Reply With Quote Reply With Quote
  2. May 6th, 2005, 11:55 AM #2
    Gixxer
    Gixxer is offline
    Member
    Join Date
    Jan 2002
    Posts
    61
    Thanks guys, I was looking for the wrong event #. Both the enable and disable fall under the id # 642.

    -Travis
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules