Logging events can help you monitor your computer or network and prevent a successful attack and can also prove very useful in determining how and when an attack occurred if you use the logs as forensic evidence.
Difficulty: Average
Time Required: 15 minutes
Here's How:
- Click on Start
- Click on All Programs
- Click on Administrative Tools (if its there skip to Step 7. To turn it on continue with Step 4)
- Right-click on the Start bar and select Properties.
- Select the Start Menu tab and click on the Customize button
- Select the Advanced tab and scroll to the bottom of the options for System Administrative Tools and select the option you want
- Select Local Security Policy
- Click on the + next to Local Policies to expand the tree
- Select Audit Policy
- For each option in the right panel you can double-click on it to select Success or Failure logging
Tips:
- To disable logging for an option just uncheck both the Success and Failure boxes
- Remember that logging can affect performance. Do some research to determine the right balance between logging and performance for your system
What You Need:
- Computer
- Windows XP Professional