No announcement yet.

Security System Audits on Stand alone XP Pro SP2 Works

  • Filter
  • Time
  • Show
Clear All
new posts

  • Security System Audits on Stand alone XP Pro SP2 Works


    I have a stand a lone Windows XP Pro Workstation (Sp2). And I need to runa full system audit on this specific computer. This computer is not connected to LAN physically. I tried to to enable XP native Audit policy but it generates to many events. What i need is to see when users login in/out (Successfully and not) what files and applications they tried to run and if they tried to access anything that they don't have access too. Is there any 3-rd party applications that do that for Win XP



  • #2
    I'm afraid I don't know what you mean by a full system audit.
    Have you tried editing the local group policy: Computer Configuration->Windows Settings->Security Settings->Local Policy->Audit Policy?
    Audit logon events should give you the logon/off auditing you want.
    Audit object access and configuring NTFS permissions and auditing on files and folders will give you the files/folder/program auditing.
    Finally Audit Privelege Use should allow you to tell when someone tried to use their rights.
    I don't know anything about (you or your) computers.
    Research/test for yourself when listening to free advice.