hi, is it possible to audit individual user activity?

i'm trying to audit the activities of a single user account. i don't want
to audit everything and then filter the logs.

is that possible?


Rowdy Yates, MCSE
--
Rowdy's Home Page
http://rowdy_yates2.tripod.com/
"it's a work in progress" :-(

Rowdy,

I do not think so. But, what exactly are you trying to audit? As you know,
there are a lot of things that can be audited ;-)

Cary


"Rowdy Yates" wrote in message
news:Xns94CDE99607B5Crowdyyates2lycoscom@207.46.248.16...
> hi, is it possible to audit individual user activity?
>
> i'm trying to audit the activities of a single user account. i don't want
> to audit everything and then filter the logs.
>
> is that possible?
>
>
> Rowdy Yates, MCSE
> --
> Rowdy's Home Page
> http://rowdy_yates2.tripod.com/
> "it's a work in progress" :-(

"Cary Shultz [A.D. MVP]" wrote in
news:eoW5vzFJEHA.1224@TK2MSFTNGP11.phx.gbl:

> Rowdy,
>
> I do not think so. But, what exactly are you trying to audit? As you
> know, there are a lot of things that can be audited ;-)
>
> Cary
>

nothing out of the ordinatry. will be auditing system changes, policy
changes, login's e.t.c.. this is non-AD server. but i was wondering if
there was a way to just audit only certrain user object/account activity.
don't want to waste event log space on auditing information for accounts i
know i don't care about.

i didn't think there was, but i thoguth i would give it a try anyway. never
hurts to ask.

Rowdy Yates, MCSE
--
Rowdy's Home Page
http://rowdy_yates2.tripod.com/
"it's a work in progress" :-(

Well kind of. You can enable auditing of object access and then enable auditing of
objects such as folders/files/AD objects for an individual user, however there will
still be lots of seemingly unrelated events in the security log. For auditing of
logons, account management, process tracking, and such there is no way to do so for
individual users. --- Steve

"Rowdy Yates" wrote in message
news:Xns94CDE99607B5Crowdyyates2lycoscom@207.46.248.16...
> hi, is it possible to audit individual user activity?
>
> i'm trying to audit the activities of a single user account. i don't want
> to audit everything and then filter the logs.
>
> is that possible?
>
>
> Rowdy Yates, MCSE
> --
> Rowdy's Home Page
> http://rowdy_yates2.tripod.com/
> "it's a work in progress" :-(