audit logons

JC

Distinguished
Apr 2, 2004
315
0
18,780
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi:

I have a domain controller with the "account logons" audit activated. I want
to audit logons for only the users of some Organizational Unit, not for all
the users of the domain.
The problem I have is that all logons (for all users) generate an "event"
and I just want to audit logons for a particular Organizational Unit. Is it
possible?

Thanks,
Juan Carlos
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

nope.
but you can export the log and then filter it using a script. (I haven't
tried this yet so don't ask me how).


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/

"JC" <jcsc@adinet.com.uy> wrote in message
news:OM7FOQBJFHA.2648@TK2MSFTNGP14.phx.gbl...
> Hi:
>
> I have a domain controller with the "account logons" audit activated. I
> want
> to audit logons for only the users of some Organizational Unit, not for
> all
> the users of the domain.
> The problem I have is that all logons (for all users) generate an "event"
> and I just want to audit logons for a particular Organizational Unit. Is
> it
> possible?
>
> Thanks,
> Juan Carlos
>
>