[logs] FW: Windows Auditing question

bosuchat_private

> Hello.  My supervisor has asked me to start monitoring bad or failed logon
> attempts for users.  I set up auditting but the "windows Event viewer"
does
> not give me the proper data.  I am running NT 4 server sp6a.  The column
for
> username just gives me "system" & the computer description is always the
> $pdc" computer name.  I have to open each event in "details" to get the
info
> for individuals.  When I "export" the data to xls I still only get the
> generic data NOT the detailed info I need to determine the "username &
> computer" the failed attempts are comming from.  Any way to do this?  Or
> what am I missing here?
>
> Thanks for your assistance
>
> Mr. Bruno Osuch
> MIS Dept.
> Greater NY Insurance
> 212-683-9700 Ext:470
> bosuchat_private <mailto:bosuchat_private>
>
>
_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis