hi.
i have a Windows 2008 R2 Domain and i want to log User Account Login Failures and also Success Account Logins(i want only allow logins that are about logging into computer in domain and not logins about for example using the credientials for using a network share).
when i select computer settings = policies = windows settings = security settings = local policies = audit policy = audit account logon events (auccess and failure)
nothing happens in event log.
but when i selectcomputer settings = policies = windows settings = security settings =Advanced audit policy configuration and in the account logon section i select all the options it gives me the log but it gives me too many log events that i am confused.and also when a Logon Failurehappens it gives me the event as a kerbros event and not as a logon event.
i think i'm doing it wrong....