locked
Login logs on windows server 2008 RRS feed

  • Question

  • Hi,

    I want to capture login logs on Windows Server 2008.

    Please help me with Event ID or any other relevant information.

    Thanks

    Tuesday, September 27, 2011 7:30 AM

Answers

  • Hello,

    see Security event logs and you will see logged events about successful logons, failures ...

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator

    • Proposed as answer by M.Abdelhamid Tuesday, September 27, 2011 7:57 AM
    • Marked as answer by Jeff Ren Wednesday, September 28, 2011 9:15 AM
    Tuesday, September 27, 2011 7:37 AM

All replies

  • Hello,

    see Security event logs and you will see logged events about successful logons, failures ...

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator

    • Proposed as answer by M.Abdelhamid Tuesday, September 27, 2011 7:57 AM
    • Marked as answer by Jeff Ren Wednesday, September 28, 2011 9:15 AM
    Tuesday, September 27, 2011 7:37 AM
  • you can find all the security related events here in the spread sheet from MS.

    http://www.microsoft.com/download/en/details.aspx?DisplayLang=en&id=17871


    http://www.virmansec.com/blogs/skhairuddin
    Tuesday, September 27, 2011 7:57 AM