Authentication Auditing in Windows 2000

Authentication auditing is an essential part of protecting Windows computers from intrusion. The big problem in Windows auditing is trying to understand what’s going on, without drowning in a flood of irrelevant or useless information. If you let it do so, Windows 2000 will bury you in event notifications. Figuring out what’s going on from those notifications can be a real chore. In this Informit.com article, Rick Cook provides specific suggestions to start making your auditing process more informative.