سؤال فى تسجيل اللوج فايل

[engreda22]

عايز اعرف الفرق بين
audit account log on events
audit log on events

[alasmer68]

السلام عليكم....

Audit Account Logon Event هذه خاصة بالدومين ففي كل عملية Logon to domain يتم تسجيل حدث هذا الدخول ....أي أنها تسجل كل أحداث تسجيل الدخول للدومين ويتم التسجيل على الدومين. أي أن من يراقب ويقوم بالتسجيل هو الدومين كونترولر

Audit Logon Event هذه تسجل كل حالات تسجيل الدخول على الجهاز المحلي أي أن من يراقب ويقوم بالتسجيل هو الجهاز المحلي.

هذا والله أعلم..



Audit account logon events
Description

This security setting determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account. Account logon events are generated when a domain user account is authenticated on a domain controller. The event is logged in the domain controller's security log. Logon events are generated when a local user is authenticated on a local computer. The event is logged in the local security log. Account logoff events are not generated.
https://technet2.microsoft.com/windowsserver/en/library/d8fc798c-1e77-4043-b59c-971b4961d85a1033.mspx?mfr=true



Audit logon events
Updated: January 21, 2005

 
Audit logon events
Description

This security setting determines whether to audit each instance of a user logging on to or logging off from a computer.

Account logon events are generated on domain controllers for domain account activity and on local computers for local account activity. If both account logon and logon audit policy categories are enabled, logons that use a domain account generate a logon or logoff event on the workstation or server, and they generate an account logon event on the domain controller. Additionally, interactive logons to a member server or workstation that use a domain account generate a logon event on the domain controller as the logon scripts and policies are retrieved when a user logs on. For more information about account logon events, see Audit account
https://technet2.microsoft.com/windowsserver/en/library/e104c96f-e243-41c5-aaea-d046555a079d1033.mspx?mfr=true

يمكنك الرجوع للرابطين للنظر في جدول الحالات المختلفه عندها قد تتضح الفكره أفضل.

خالص تحياتي
أبو محمود