In this segment Scott demonstrates the difference between the security logs and other events. The auditing of successful and failed attempts is demonstrated with a view of login attempts in the security log. This video concludes with a demonstration of how to activate other types of security auditing by editing the local policy.
- [Instructor] So far this chapter has been about…events that are collected and reported…because Windows thought they were significant…and we chose to use filters to decide…which ones we wanted to see.…The security log is a little different…in that we get to decide what information is collected.…It's also different in that it doesn't include…information warnings and errors,…it keeps a list of successful and/or failed…attempts to access secure resources.…There are some events that Windows is configured…to audit by default, such as on this screen…we can see logging on and logging off.…
There are other features…that we can choose to add to this list.…But we can take a quick scroll through here…and we see all of these successful logins and log-offs…and at one point as we go down the list,…we'll see failed attempts to login to the server.…These are events that you might…want to take a closer look at.…For example, we see that there was…a failed attempt to log in.…If we expand this area, we can scroll through…and we can see which account was attempting…
AuthorScott M Burrell
- Staying up to date with WSUS
- Installing and configuring WSUS
- Monitoring Windows Server performance
- Scheduling monitoring
- Monitoring network usage with Message Analyzer
- Troubleshooting Windows Server with event logs
Skill Level Intermediate
Windows Server 2012 R2: Manage Group Policywith Ed Liberman1h 46m Intermediate
1. Staying Up to Date with WSUS
2. Monitoring Server Performance
3. Monitoring Network Usage
4. Using Event Logs to Troubleshoot Windows Server 2016
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.