We have just installed a Barracuda device onto our network, and it has a DC Agent that allows to network device to monitor logons for permission reasons. It does so by monitoring the event logs for Success/Failure for event ids 538 and 540.
On our domain controller under the "Default Domain Controller Security Settings" I have set "Audit account logon events" to Success, failure - and also did the same to "Audit Logon events".
With these both set to Success/Failure, I have logged out of two different client computers (one Vista, and one XP), and then logged back in. Checking the event viewer on the server I could not find these events under the Security events.
How can I get these events to start showing up?
On our domain controller under the "Default Domain Controller Security Settings" I have set "Audit account logon events" to Success, failure - and also did the same to "Audit Logon events".
With these both set to Success/Failure, I have logged out of two different client computers (one Vista, and one XP), and then logged back in. Checking the event viewer on the server I could not find these events under the Security events.
How can I get these events to start showing up?
