[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference decwet::nt-developers

Title:MS Windows NT Developers
Notice:See note 1222 for MS bug reporting info
Moderator:TARKIN::LINEIBER
Created:Mon Nov 11 1991
Last Modified:Tue Jun 03 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:3247
Total number of notes:15633

3242.0. "Logon security tracking for Exchange email" by NEWVAX::MELTON () Fri May 16 1997 12:20

    The objective:
    --------------
    We need to monitor security on a Windows NT Server Exchange email
    network.  The customer wants a report with the number of email user
    successful logons and failed logons.

    What we've done so far:
    -----------------------
    Our existing code measures performance by collecting Perfmon
    statistics, but we haven't been able to identify the right counters for 
    logon attempts & successes.  We tried using the 'Server' object 'Errors
    Logon' and 'Logon Total' counters, but they did not seem to increment
    when we logged into Exchange.

    We are not sure if the Exchange server is a primary or backup domain
    controller.  Perhaps counters got incremented elsewhere?

    Help!
    -----
    Please respond if you can help us figure out how to monitor email logon
    success/failure on Windows NT.
T.RTitleUserPersonal
Name		DateLines
3242.1Needed to turn on auditingNEWVAX::MELTONMon May 19 1997 12:556
    We figured it out.  We did not have logon auditing turned on in
    User Manager/Policies/Auditing
    
    Thanks anyway,
    
    Tom