Track the no of users authenticating particular DC.

Track the no of users authenticating particular DC.

I have about 10 Domain Controllers in one domain. I need to check how many users are authenticating using specific DC.

I know SET command can be used from workstation but is there any logging which might help from server.

Any help will be greatly appreciated.

Thanks in advance,
Sanzu.

Posted by Sanjay Keswani at Wednesday, May 02. 2007
Categories: Windows 2003

Previous Post
Next Post

 

What did you think of this article?




Trackbacks
Trackback specific URL for this post
  • Trackbacks are closed for this post.
Comments
Display comments as (Linear | Threaded)

  • Wednesday, May 02. 2007 Prabhat wrote:
    Check the security logs in the event viewer. Or "Set L" command on a single PC can tell the logonserver.
    Reply to this
  • Wednesday, May 02. 2007 Anonymous wrote:
    I just came across the solution. I need to enforce domain controllers security policy for "audit account logon events"

    Thanks!
    Reply to this
  • Thursday, May 03. 2007 Ismail wrote:
    Hi Sanju,

    You can track user logon attempts by using the audit setting "audit account logon events. With the help of this setting at a domian controller any user who logon through that DC will be recorded in the Dc security event log. Events like 672, 673,680,675, 676 & 681 are some of the examples

    Regards,
    Ismail mohammed
    Reply to this
    1. Thursday, May 03. 2007 Rishi wrote:
      That was what I was typing Mr.Ismail. Any way you guys are fast. Any thing on exchange 2007 transport coming .. in this blog.
      Reply to this
Leave a comment

Submitted comments are subject to moderation before being displayed.

 Name (required)

 Email (will not be published) (required)

Your comment is 0 characters limited to 3000 characters.