|
8.2 Auditing
You can track both user activities and system activities, which are called events, on a computer through
auditing and you can specify that Windows Server 2003 write a record of an event to the security log. The
security log maintains a record of valid and invalid logon attempts and events related to creating, opening, or
deleting files or other objects. An audit entry in the security log contains information about:
• The action that was performed
• The user who performed the action
• The success or failure of the event
• When the event occurred
|