The syslog-ng 3.0 Administrator Guide

Procedure 5.11.3.1. Turning on auditing on Windows 2003 Server

1. Login as an administrator.

2. Click Start, point to Programs, point to Administrative Tools, and click Domain Security Policy.

3. In the console tree, click Local Policies, then Audit Policy.

4. Double-click on an event and select the Define these policy settings option.

5. Select the type of event to log: Success or Failure.

6. Repeat Steps 4-5 for every other event you want to audit.