Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Recommended Posts

Posted

Hi,

 

I am having problems with PCs occasionally not receving GPOs properly and when examining the logs I found that the issues was access denied to the sysvol folder.

Is there any whay of logging which DC authenticated the user as we have two in use (one only as stand by). One of the DCs is showing signs of slow file access but I would like to tie down the error to one or the other of the DCs before trying out any more tests.

 

Cheers

Posted

Right to sort the wood from the trees I needs the event id for a successful authentication by the server. I would use the main DC to find this out but as that is 2008R2 the event numbers and descripters are different. Also, as ths a the main file server there are lots of user success records for when a drive is setup which is confusing matters.

Does anyone know the event numbers accosiated with a succsseful user authentication.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...