Tech Support > Microsoft Windows > Windows Server > audit logs on windows 2003
audit logs on windows 2003
Posted by Daniele Pasian on February 3rd, 2005


Hi i'm an OLD win 2k admin....

Now on windows 2003 server i've to much audit logs....

On old win2k if i disable audit by GPO it will work...

Now i use GPMG and here the results

Policy Setting Winning GPO
Audit account logon events No auditing Default Domain Controllers
Policy
Audit account management No auditing Default Domain Controllers
Policy
Audit directory service access No auditing Default Domain Controllers
Policy
Audit logon events No auditing Default Domain Controllers
Policy
Audit object access No auditing Default Domain Controllers
Policy
Audit policy change No auditing Default Domain Controllers
Policy
Audit privilege use No auditing Default Domain Controllers
Policy
Audit process tracking No auditing Default Domain Controllers
Policy
Audit system events No auditing Default Domain Controllers
Policy


as you see the DC does not oudit anythig but i recive tons of this logs...

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538

Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 576
Date: 03/02/2005
Time: 18.29.46
User: NT AUTHORITY\SYSTEM
Computer: SERVER

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540

Could you help me please!!!!

Thank you

Dan