Can anyone tell me where Windows 2000 Prof. store audits once the Audit_Trail = OS is set within the init parameter. Where would the operating system audit trail be located once audits has been ran.
Printable View
Can anyone tell me where Windows 2000 Prof. store audits once the Audit_Trail = OS is set within the init parameter. Where would the operating system audit trail be located once audits has been ran.
In Win2000's event log (I guess its C:\WINNT\system32\config\AppEvent.Evt). Use Event Viewer to view/handle audit trail.