Home

how to best practice confgiure about enable audit log for Active Directory , Server , Client

%3CLINGO-SUB%20id%3D%22lingo-sub-908773%22%20slang%3D%22en-US%22%3Ehow%20to%20best%20practice%20confgiure%20about%20enable%20audit%20log%20for%20Active%20Directory%20%2C%20Server%20%2C%20Client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-908773%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Current%20I%20want%20enable%20Audit%20Login%20for%20Active%20Directory%20%2C%20Server%20%2C%20Client%20%2C%20please%20recommend%20help%20me%20these%20value%20should%20configure%20in%20group%20policy%20for%20this%20.%20should%20be%20separate%20group%20policy%20for%20every%20this%20%3F%3C%2FP%3E%3CP%3EBest%20Regard%2C%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-908773%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-909303%22%20slang%3D%22en-US%22%3ERe%3A%20how%20to%20best%20practice%20confgiure%20about%20enable%20audit%20log%20for%20Active%20Directory%20%2C%20Server%20%2C%20Client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-909303%22%20slang%3D%22en-US%22%3E%3CP%3Ehi%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%26nbsp%3Byou%20can%20do%20configure%20this%20option%20in%20gpo%26nbsp%3B%26nbsp%3B%3CSTRONG%3EAudit%20account%20logon%20events%26nbsp%3B%3C%2FSTRONG%3Eand%26nbsp%3B%3CSTRONG%3EAudit%20logon%20events%3C%2FSTRONG%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20hope%20i%20can%20help%20you%20to%20fix%20this%20problem%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-909312%22%20slang%3D%22en-US%22%3ERE%3A%20how%20to%20best%20practice%20confgiure%20about%20enable%20audit%20log%20for%20Active%20Directory%20%2C%20Server%20%2C%20Client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-909312%22%20slang%3D%22en-US%22%3Ehi%20tien%20ngo%2C%20you%20can%20actually%20use%20group%20policy%20to%20audit%20active%20directory.%20you%20have%20all%20the%20requires%20settings%20under%3A%20computer%20configuration-%26gt%3Bwindows%20settings-%26gt%3Bsecurity%20settings-%26gt%3Baudits%20policy%20regards%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-910353%22%20slang%3D%22en-US%22%3ERE%3A%20how%20to%20best%20practice%20confgiure%20about%20enable%20audit%20log%20for%20Active%20Directory%20%2C%20Server%20%2C%20Client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-910353%22%20slang%3D%22en-US%22%3E%3CP%3Eplease%20recommend%20help%20which%20value%20will%20configure%20for%20AD%20or%20follow%20as%20document%20is%20ok%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.manageengine.com%2Fproducts%2Factive-directory-audit%2Fhelp%2Fgetting-started%2Fmanual-configuration-dc-auditing.html%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.manageengine.com%2Fproducts%2Factive-directory-audit%2Fhelp%2Fgetting-started%2Fmanual-configuration-dc-auditing.html%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-913192%22%20slang%3D%22es-ES%22%3ERE%3A%20how%20to%20best%20practice%20confgiure%20about%20enable%20audit%20log%20for%20Active%20Directory%20%2C%20Server%20%2C%20Client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-913192%22%20slang%3D%22es-ES%22%3E%3CP%3EGood%20document%2C%20I%20keep%20it%2C%20thank%20you.%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Tien Ngo Thanh
Regular Contributor

Hi

    Current I want enable Audit Login for Active Directory , Server , Client , please recommend help me these value should configure in group policy for this . should be separate group policy for every this ?

Best Regard,

4 Replies

hi@Tien Ngo Thanh you can do configure this option in gpo  Audit account logon events and Audit logon events 

i hope i can help you to fix this problem

hi tien ngo, you can actually use group policy to audit active directory. you have all the requires settings under: computer configuration->windows settings->security settings->audits policy regards

please recommend help which value will configure for AD or follow as document is ok

https://www.manageengine.com/products/active-directory-audit/help/getting-started/manual-configurati...

 

 

 
Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
36 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies