Security Basics: RE: audit user logon activity

[<adisegna () siscocorp com>]

Chang,

Read any Windows Security guideline paper. You will get information on
audition logon events. Check out www.nsa.gov for guide guidelines.

Audit Logon events - This category is separate from the "Audit Account
logon events". This category will generate a success or failure event
when a user logs in or out of the system. Events are also generated when
a user connects or disconnects from a system via either an interactive
type of logon, or via a network type of logon

Audit account logon events - this category will generate success or
failure events whenever a domain controller receives a logon request.


Arthur DiSegna
Information Technology Group
Security Identification Systems Corporation
 

-----Original Message-----
From: chang zhu [mailto:cyz2000 () yahoo com] 
Sent: Wednesday, October 06, 2004 3:11 PM
To: security-basics () securityfocus com
Subject: audit user logon activity

Hi, all

I tried to find out how to find whether a user logs to
multiple computers on the network.  From MS security
log, I can notfind anything I want to.  Is there any
windows freeutility which allows to audit a user's log
onactivity?
(BTW, we are in windows 2000 environment).

Thanks,

chang 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com