|
Posted by karl levinson, mvp on December 15, 2005, 7:35 am
If you were Registered and logged in, you could reply and use other advanced thread options Enable auditing, both on the workstation and on all domain controllers.
www.securityadmin.info/faq.asp#auditing
>I believe a user has obtained my administrative logon. How can I track
>them
> to find out for sure?
>
> - I have a win2003 domain.
> --
> Thank you
|