SOX Audit

[inkastinka]

We are in the middle of SOX (sorbane oxley)

I have a pretty simple question.

we need to get be able to save all log on and log offs that are done on the servers.

we are these log files? and where do I make the security changes in order that it can get logged.

hope 4 a quick answer!

Dave

 

[Binkie3010]

You can find these event id's in the Event Viewer logs (Security Events). Now retaining these id's are a different story; you are going to have to look at third party tools for this benefit.

Try SysTrack from Lakeside Software (

http://www.lakesidesoftware.com)

We use it here for all of our auditing purposes.

Good luck!

 

[inkastinka]

I was looking more for where the files are saved on the server.

in Windows 2000 its under C:\Windows\system32\config

but where is it on an NT 4.0 Server /2003?