Event ID 4624 doesn't show up other than... Expand / Collapse
Author
Message
Posted 4/25/2016 2:35:10 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 4/25/2016 2:25:54 PM
Posts: 1, Visits: 0
Trying to determine logon durations in Citrix, and need Event ID 4624, but no user logon entries are logged in the Security logs. I've add the appropriate GPO settings and the GPResult shows them correctly on the server, but no user logon log is created. If I remove the Domain GPO and use Local Group Policy I can get them to show up, but not when using the Domain GPO. I have a lot of servers and change out servers regularly so I don't want to use Local GPO to maintain this setting.
Post #5198
Posted 5/31/2016 6:20:59 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
Can you run auditpol /get /category:* and post the results? Check out Randy's post that states:
6. Do not use Local Security Policy, Group Policy Results Wizard, RSOP or gpresults to verify what your true audit policy is
7. Use only “auditpol /get /category:*” to verify what your true audit policy is on a given system

https://www.ultimatewindowssecurity.com/blog/default.aspx?p=aa6c16dc-8bb8-40e3-aac9-d2c7eaa6c5f6
Post #5215
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 6:15am