Authentication auditing is an essential part of protecting Windows computers from intrusion. The big problem in Windows auditing is trying to understand what’s going on, without drowning in a flood of irrelevant or useless information. If you let it do so, Windows 2000 will bury you in event notifications. Figuring out what’s going on from those notifications can be a real chore. In this Informit.com article, Rick Cook provides specific suggestions to start making your auditing process more informative.