8.3.1 Viewing Security Logs
Windows Server 2003 records information about events that are monitored by an audit policy, such as failed
and successful logon attempts in the security log. To view the security log, do the following:
• Click on the
• Point to
• Click on
• Click on
In the details pane, Event Viewer displays a list of log entries and summary information for each item.
Successful events appear with a key icon and unsuccessful events appear with a lock icon. Other important
information that is recorded in the log includes the date and time that the event occurred, the category of the
event, and the user who generated the event.
Note: Windows Server 2003 records events in the security log on the computer
at which the event occurred. You can view these events from any computer
if you have administrative privileges on the computer where the events
occurred. To view the security log on a remote computer, start the MMC
and create a custom console; point Event Viewer to a remote computer
when you add this snap-in to a console.