Logon/Logoff vs Auth events Expand / Collapse
Author
Message
Posted 9/1/2011 3:16:24 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 6/26/2013 11:23:50 AM
Posts: 6, Visits: 11
I've heard and read Randy say that logon/logoff events are different than auth events and both should be collected. In the case of a domain user logging into a member server, what is the benefit of the DC events over and above the member server logon/logoff events? Is the main benefit the ability to tract the initial entry into the network?
Post #795
Posted 11/14/2011 8:08:48 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
yes, account logon events give you a central record of all domain account authentications.  i wouldn't call it initial entry to the network because there is no such thing in the Windows environment no matter how much that scenario appears to be so
Post #838
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 7:31pm