| Author |
Message |
WILDPACKET
Guest
|
Posted:
Wed Oct 26, 2005 8:51 pm Post subject:
XP Agent Installs or XP MP [WILDPACKET] |
|
|
Do I have to push Agents on all the XP Clients on my LAN to receive Failed
Logon Attempts and other Alerts or just installing the XP MP and configuring
it should do it?
Please advise and thank you in advance. |
|
| Back to top |
|
 |
Daniel Lai [MVP-Managemen
Guest
|
Posted:
Thu Oct 27, 2005 12:52 am Post subject:
Re: XP Agent Installs or XP MP [WILDPACKET] |
|
|
Hello,
Thank you for your posting!
If it is a Domain Environment, You need to monitor the Domain Controller's
Event Security Log. But first, You should enable "Account Logon Event" on
the DC. It is located in Audit Policy.
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"WILDPACKET" <WILDPACKET@discussions.microsoft.com> wrote in message
news:E249C218-511E-4DE2-BA5D-DDBAAEEDB1A2@microsoft.com...
| Quote: | Do I have to push Agents on all the XP Clients on my LAN to receive Failed
Logon Attempts and other Alerts or just installing the XP MP and
configuring
it should do it?
Please advise and thank you in advance. |
|
|
| Back to top |
|
 |
Wild Packet
Guest
|
Posted:
Thu Oct 27, 2005 6:02 am Post subject:
Re: XP Agent Installs or XP MP [WILDPACKET] |
|
|
Thanks Daniel for the response.
I have already enabled that and it wokrs fine.
I was wondering if I could capure something similar in the Operators
Console on MOM???? Or could MOM send me e-mails for the XPClients which are
being locked out after failure logon attemtps????
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com> wrote in
message news:eGJ69Qo2FHA.3420@TK2MSFTNGP15.phx.gbl...
| Quote: |
Hello,
Thank you for your posting!
If it is a Domain Environment, You need to monitor the Domain Controller's
Event Security Log. But first, You should enable "Account Logon Event" on
the DC. It is located in Audit Policy.
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"WILDPACKET" <WILDPACKET@discussions.microsoft.com> wrote in message
news:E249C218-511E-4DE2-BA5D-DDBAAEEDB1A2@microsoft.com...
Do I have to push Agents on all the XP Clients on my LAN to receive
Failed
Logon Attempts and other Alerts or just installing the XP MP and
configuring
it should do it?
Please advise and thank you in advance.
|
|
|
| Back to top |
|
 |
Daniel Lai [MVP-Managemen
Guest
|
Posted:
Thu Oct 27, 2005 6:20 am Post subject:
Re: XP Agent Installs or XP MP [WILDPACKET] |
|
|
Hello,
Thank you for your posting!
Yes, Just add the noitification response to that event rule (with Alert).
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"Wild Packet" <mailtomohsin@hotmail.com> wrote in message
news:uenXoIp2FHA.3272@TK2MSFTNGP09.phx.gbl...
| Quote: | Thanks Daniel for the response.
I have already enabled that and it wokrs fine.
I was wondering if I could capure something similar in the Operators
Console on MOM???? Or could MOM send me e-mails for the XPClients which
are being locked out after failure logon attemtps????
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com> wrote
in message news:eGJ69Qo2FHA.3420@TK2MSFTNGP15.phx.gbl...
Hello,
Thank you for your posting!
If it is a Domain Environment, You need to monitor the Domain
Controller's Event Security Log. But first, You should enable "Account
Logon Event" on the DC. It is located in Audit Policy.
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"WILDPACKET" <WILDPACKET@discussions.microsoft.com> wrote in message
news:E249C218-511E-4DE2-BA5D-DDBAAEEDB1A2@microsoft.com...
Do I have to push Agents on all the XP Clients on my LAN to receive
Failed
Logon Attempts and other Alerts or just installing the XP MP and
configuring
it should do it?
Please advise and thank you in advance.
|
|
|
| Back to top |
|
 |
WILDPACKET
Guest
|
Posted:
Thu Oct 27, 2005 12:51 pm Post subject:
Re: XP Agent Installs or XP MP [WILDPACKET] |
|
|
Thank you for your reply.
I cannot seem to find this option.
Please advise where is this?
Thank you.
"Daniel Lai [MVP-Management Infrastructur" wrote:
| Quote: |
Hello,
Thank you for your posting!
Yes, Just add the noitification response to that event rule (with Alert).
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"Wild Packet" <mailtomohsin@hotmail.com> wrote in message
news:uenXoIp2FHA.3272@TK2MSFTNGP09.phx.gbl...
Thanks Daniel for the response.
I have already enabled that and it wokrs fine.
I was wondering if I could capure something similar in the Operators
Console on MOM???? Or could MOM send me e-mails for the XPClients which
are being locked out after failure logon attemtps????
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com> wrote
in message news:eGJ69Qo2FHA.3420@TK2MSFTNGP15.phx.gbl...
Hello,
Thank you for your posting!
If it is a Domain Environment, You need to monitor the Domain
Controller's Event Security Log. But first, You should enable "Account
Logon Event" on the DC. It is located in Audit Policy.
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"WILDPACKET" <WILDPACKET@discussions.microsoft.com> wrote in message
news:E249C218-511E-4DE2-BA5D-DDBAAEEDB1A2@microsoft.com...
Do I have to push Agents on all the XP Clients on my LAN to receive
Failed
Logon Attempts and other Alerts or just installing the XP MP and
configuring
it should do it?
Please advise and thank you in advance.
|
|
|
| Back to top |
|
 |
Daniel Lai [MVP-Managemen
Guest
|
Posted:
Thu Oct 27, 2005 4:51 pm Post subject:
Re: XP Agent Installs or XP MP [WILDPACKET] |
|
|
Hello,
Thank you for your posting!
You must need to enable "Generate Alert" of the Event Rule first, and then
you can add a notification response in that rule.
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"WILDPACKET" <WILDPACKET@discussions.microsoft.com> wrote in message
news:BBFDD196-586E-4B24-89B2-90285C249C26@microsoft.com...
| Quote: | Thank you for your reply.
I cannot seem to find this option.
Please advise where is this?
Thank you.
"Daniel Lai [MVP-Management Infrastructur" wrote:
Hello,
Thank you for your posting!
Yes, Just add the noitification response to that event rule (with Alert).
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"Wild Packet" <mailtomohsin@hotmail.com> wrote in message
news:uenXoIp2FHA.3272@TK2MSFTNGP09.phx.gbl...
Thanks Daniel for the response.
I have already enabled that and it wokrs fine.
I was wondering if I could capure something similar in the Operators
Console on MOM???? Or could MOM send me e-mails for the XPClients
which
are being locked out after failure logon attemtps????
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com
wrote
in message news:eGJ69Qo2FHA.3420@TK2MSFTNGP15.phx.gbl...
Hello,
Thank you for your posting!
If it is a Domain Environment, You need to monitor the Domain
Controller's Event Security Log. But first, You should enable "Account
Logon Event" on the DC. It is located in Audit Policy.
If you have any questions, please feel to let me know. I am glad to be
of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
"WILDPACKET" <WILDPACKET@discussions.microsoft.com> wrote in message
news:E249C218-511E-4DE2-BA5D-DDBAAEEDB1A2@microsoft.com...
Do I have to push Agents on all the XP Clients on my LAN to receive
Failed
Logon Attempts and other Alerts or just installing the XP MP and
configuring
it should do it?
Please advise and thank you in advance.
|
|
|
| Back to top |
|
 |
|
|
|
|