Tech Off Thread

4 posts

Forum Read Only

This forum has been made read only by the site admins. No new threads or comments can be added.

Windows security logs?

Back to Forum: Tech Off
  • User profile image
    Alt-F4

    They're over there on slashdot talking about Windows getting an indepedent security certification. They started talking about security logs. My question is, does Windows XP have any "security logs" feature?

  • User profile image
    jdewalt

    event viewer under administrative tools has some security log options.
    mainly talks about privelege usage and log on/off events.

  • User profile image
    megame

    Administrative Tools->Event Log->Security

    To enable different types of auditing go to Administrative Tools->Local Security Policy, Local Policies->Audit Policy

    There you can select from (success/failure for each):

    • Audit account logon events
    • Audit account management
    • Audit directory service access
    • Audit logon events
    • Audit object access
    • Audit policy change
    • Audit privilege use
    • Audit process tracking
    • Audit system events

    Then if you've selected "object access" you can select auditing mask for any kernel object - including files/printers/etc.

    To set auditing for file: Windows Explorer/(select file/folder)->Properties - Security tab, Advanced and then Auditing Tab
    There you can add for which users/groups and what to audit.

  • User profile image
    Alt-F4

    Cool, guys. Thanks.

Conversation locked

This conversation has been locked by the site admins. No new comments can be made.