No announcement yet.

Auditing of Security Events

  • Filter
  • Time
  • Show
Clear All
new posts

  • Auditing of Security Events


    I have recently installed a management pack in Operations Manager 2007 that will allow me to monitor several security alerts. I tested out a couple of these and the management pack does not seem to work. I dont think it is receiving an alerts from my Domain Controllers

    My question is, how do I enabled my DC to write an alert to the event viewer when one of these events in triggered:

    Domain Trust Removed 611
    Audit Policy Changed 612
    Domain Policy Changed 643
    System Time Changed 520
    Service Installation Failure 601
    Domain Trust Created 610
    Kerberos Policy Changed 617
    User Right Assigned 608
    Audit Log Cleared 517
    Scheduled Task Created 602
    Audit Queue Exhausted 516

    Is there something specific I can enable or must it be done manually?

    I did a test by granting a user domain admin rights and no alert was genearated in the event viewer even though auditing is enabled in my domain