Everything you need to know about Windows logon auditing

Try ADAudit Plus Now
 
×

Register to watch video

  •  
  •  
  •  
  • By clicking ' Play now' you agree to processing of personal data according to the Privacy Policy.
 

Why watch this webinar?

User logon activity needs to be audited to meet various security, operational, and compliance requirements of an IT environment, such as:

  • Detecting suspicious activities like a high volume of logon failures.
  • Tracking the active and idle time spent by users at their workstations.
  • Maintaining a comprehensive audit trail of logons occurring across the domain and more.

However, the process of auditing logons has a steep learning curve. We've put together this webinar to make it easier for you to get on top of the process.

In this webinar, you'll learn how to:

  • The difference between authentication and logons.
  • The auditing settings you need to configure to enable logging.
  • The 12 critical event IDs to keep track of.
  • Logon types, failure codes, and other event fields to keep an eye on.
  • How to overcome the limitations of native auditing.
 

Featured in this Resource

Logon tracing

Track all logons spanning from logon failures to logon history across your domain controllers, Windows servers, and workstations. Monitor the actual time spent by employees at their workstations with details on when they were idle and active. Audit remote desktop connections and remote logons occurring via RDG and RADIUS NPS servers.

 

Logon reports

Gain real-time visibility into user logons in just a few clicks. Maintain a comprehensive audit trail of all logon activities. Automate the generation and delivery of reports to pass compliance audits such as SOX, HIPAA, PCI DSS, GLBA, FISMA, the GDPR, and ISO 27001.

 

Logon notifications

Become instantly notified via SMS and email of suspicious activities, such as a sudden spike in logon failures. Leverage UBA to establish normal activity patterns and spot subtle anomalies such as an unusual logon time for a particular user. Execute scripts to automate response actions, like disabling a user account.

 

Address in-depth AD monitoring and reporting needs with ADAudit Plus.

Download Get quote

Learn more about ADAudit Plus

Additional resources

Learn more about ADAudit Plus with our extensive resource collection

© 2022 Zoho Corporation Pvt. Ltd. All rights reserved.