70-217 - Question for all you MCSEs, MCSAs

Author

Question for all you MCSEs, MCSAs

MsSmokey

2003-10-07, 11:54 pm

Does anybody know the difference between these two types of audit events? I'm a little confused.

Types of Events Audited by Windows 2000
Account logon
A domain controller received a request to validate a user account

Logon Events
A user logged on or off, or a user made or cancelled a network connection to the computer

I'm thinking account logon events are when a DC recieves a request to validate an account and Logon Events are logging on and off of windows and network connections made to the physical computer. So Logon Events are stored in the security log on the local computer and Account Logon events are stored in the security log on the DC, right?

em_ar_ducks

2003-10-08, 11:06 pm

DC security log collects account related events such as authentication.

Local server security log will collect "resource access" related events.

Be careful if you use a DC as anything other than a DC (web, ftp, file&print server, etc). A lot of people when they set stuff up to test will configure only one machine, make it a DC and practice configuring additional services. First time they configure the service on a non-DC, things won't work the same.

MsSmokey

2003-10-09, 7:26 am

Thanks for your input. I figured as many people that claim MCSE/MCSA on this site more people would have replied...

em_ar_ducks

2003-10-09, 8:25 am

not sure how often some check on specific areas.

I'm in the process of studying still so I lurk a lot, only recently began posting.

enforcer

2003-10-10, 9:41 am

What you'll find is most people look in the forums they are studying for, occaisionally someone who has passed a particular exam will check back to see if they can help.

217 seems to one of the quieter forums, I think this is because it is the last core exam people do and as they have had plenty of experience with the others they don't tend to spend as long on this as say 210 and 215.

Sponsored Links