• Intranet
• Community Portal
• Information Services
  • AV & Multimedia
  • Basic Security
  • Classroom/Public Computing
  • Getting Help
  • IT Resources & Services
  • Research Computing
  • Web Development
• Web Portal to UTS

Basic Security

Windows 2000 and XP personal computers offer an auditing feature which enables you to determine if an unauthorized person has tried to access your system. To use this feature, you must first set up auditing - which allows you to track unauthorized access attempts on your computer - and then activate display the event viewer - which lists a record of all such attempts for your review.

Step 1. Enable Auditing

1. Click Start, click Run, type mmc /a, and then click OK.
2. On the Console menu, click Add/Remove Snap-in, and then click Add.
3. Under Snap-in, click Group Policy, and then click Add.
4. In the Select Group Policy Object box, click Local Computer, click Finish, click Close, and then click OK.
5. In the Local Computer Policy box, click Computer Configuration, click Windows Settings, click Security Settings, click Local Policies, and then click Audit Policy.
6. In the details pane, double click Audit logon events.
7. Select Unsuccessful logon attempts, and successful logon attempts. Click OK.
8. Restart your computer.

Step 2. How to View Security Logs

1. Click Start, point to Programs, point to Administrative tools, and then click Event viewer.
2. In the console tree, click Security log.
3. Look in the details pane for information about the event you want to view, and then double-click the event.