user account audit not recording in event viewer
Hey guys
I running a Win2K domain, with active directory (AD). I have security auditting running via the 'default domain controllers' policy. I am setup to audit success and failure events for account management. When I go into AD, connect to domain controller A and disable or enable a user account I will not see the corresponding event 629 or 626 logged in the event viewer. What is going on here, am I missing something? I have other events that are showing up in there from out on the domain just not the enable or disable user accounts like I am looking for.
Thanks