Archived from groups: microsoft.public.win2000.security (More info?)
Does anyone know how I could track when user accounts are created on a Win2K
server? The server is a stand alone server, not running AD, so they will be
local user accounts. I know I can track login of users, but I need to know
if another administrator creates a user account.
Archived from groups: microsoft.public.win2000.security (More info?)
Enable auditing of Account Management in Local Security Policy and then an event
will be recorded in the security log when accounts are created, changed, or
deleted. --- Steve
"Chris Mann" <ChrisMann@discussions.microsoft.com> wrote in message
newsCA783B1-BFEB-4A6A-BE64-7C0CC0553E31@microsoft.com...
> Does anyone know how I could track when user accounts are created on a Win2K
> server? The server is a stand alone server, not running AD, so they will be
> local user accounts. I know I can track login of users, but I need to know
> if another administrator creates a user account.
>
> Thanks in advance!
Archived from groups: microsoft.public.win2000.security (More info?)
Thanks! I'll try this out!
"Steven Umbach" wrote:
> Enable auditing of Account Management in Local Security Policy and then an event
> will be recorded in the security log when accounts are created, changed, or
> deleted. --- Steve
>
> http://support.microsoft.com/defau [...] -us;300549 -- how to
> configure auditing.
>
> "Chris Mann" <ChrisMann@discussions.microsoft.com> wrote in message
> newsCA783B1-BFEB-4A6A-BE64-7C0CC0553E31@microsoft.com...
> > Does anyone know how I could track when user accounts are created on a Win2K
> > server? The server is a stand alone server, not running AD, so they will be
> > local user accounts. I know I can track login of users, but I need to know
> > if another administrator creates a user account.
> >
> > Thanks in advance!
>
>
>
You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.