From the course: Windows Server 2012 Active Directory: File System and Storage

Unlock this course with a free trial

Join today to access over 22,400 courses taught by industry experts.

Viewing audit events

Viewing audit events

- Now that you've enabled auditing in you environment, whether it be with a standard audit or you've enabled auditing with some of the advanced auditing features, or you've enabled auditing out to local machines, we now need to be able to view those actual events. So to view the events, we're gonna bring up what's called the Event Viewer. Imagine that. Go to event, we're going to monitor and view events through the Event Viewer. And in the Event Viewer, we have under our Windows logs. As soon as our machine catches up here. We have under our Windows logs, we have what's called the security log. In order to view the security log you must have local administrative rights on a computer. If you're not a member of the local administrators group, by default, you can not view the security log. Maybe... In the group policies, there is an option in a local security policy, to modify who can view the local security log. And you can actually set that to be a non-administrator. It's not…

Contents