MOM - Security Event Logs
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
MOM - Security Event Logs

 
Post new topic   Reply to topic    Windows Server Forum Index -> MOM
Author Message
iamchris
Guest





Posted: Wed Jan 19, 2005 12:20 am    Post subject: MOM - Security Event Logs Reply with quote

I am being audited for failed logon attempts. I need to print a report
of all failed domain logon attempts for a certain date range. Will MOM
give me this information or do I need to purchase a product that
strictly deals with event log monitoring? If MOM will do it, how do I
set this up? Thanks in advance!
Back to top
Jeremiah Beckett
Guest





Posted: Thu Jan 20, 2005 4:37 am    Post subject: RE: MOM - Security Event Logs Reply with quote

MOM can do it.

You can used the canned MOM/OperationalAnalysis/event report and reference
individual events (ie 529, 535) or create your own report. You might need to
add some event rules for collection depending on what you already have
loaded.

I'm assuming this is in relation to SOX so I would recommend creating a new
MP to support this auditing requirement and future needs. You can develop
some very comprehensive reports and MP features just for SOX if you spend a
little time. We did one recently to capture all privlaged account logon
afterhours and other manual SOX auditing.

FYI, Manakoa at www.manakoa.com is working on some MPs specifically to
address SOX, HIPPA and other federal regulatory IT compliancy auditing. They
should be released later this year.

Good luck.

"iamchris" wrote:

Quote:
I am being audited for failed logon attempts. I need to print a report
of all failed domain logon attempts for a certain date range. Will MOM
give me this information or do I need to purchase a product that
strictly deals with event log monitoring? If MOM will do it, how do I
set this up? Thanks in advance!

Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> MOM All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB