Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > march 2006 >

iis security : Can't audit security events


Vic
3/23/2006 9:16:32 AM
Heres my problem:
There is a webserver at work, win2k, that originally was joined to the
domain, but is always logged on locally.

We can't get it to audit security events - domain policies override local
policies. We logged on with an admin account from the domain to attempt to
look at the local security policy but it has a red x on it and says we don't
have rights.

We'd really like to be able to audit the logons on this machine but have no
idea on how to get it working.

Any help is much appreciated!
Ken Schaefer
3/26/2006 9:54:14 PM
This isn't really an IIS question.

What you want to do is download GPMC (Group Policy Management Console) from
the Microsoft website.
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

GPMC can be run from any Windows Server 2003 box or Windows XP SP2 box.

Use the RSOP (Resultant Set of Policy) modelling component of GPMC to
determine what policy is denying you the right to enable logon auditing on
the Win2000 box. Alter that policy as required.

Cheers
Ken


[quoted text, click to view]
: Heres my problem:
: There is a webserver at work, win2k, that originally was joined to the
: domain, but is always logged on locally.
:
: We can't get it to audit security events - domain policies override local
: policies. We logged on with an admin account from the domain to attempt to
: look at the local security policy but it has a red x on it and says we
don't
: have rights.
:
: We'd really like to be able to audit the logons on this machine but have
no
: idea on how to get it working.
:
: Any help is much appreciated!
:

AddThis Social Bookmark Button