PROJECT 1

Good administrators check their logs regularly. They need to know what went on when they were away. They need to look for intruders, compromised machines, stolen or deleted files, etc. The list of things to look for can be extensive.

Microsoft Windows Event Viewer is a simple program that organizes these logs in a way that makes them easy to view. Learning how Event Viewer works is a great training platform for beginners. It is also a useful diagnostic tool.

In this example you will enable logging of security events, log in and out of your machine, and then look up the event in Event Viewer.

a. Click Start, Control Panel, System and Security, and Administrative Tools.

b. Double-click Local Security Policy.

c. Click on Local Policies, Audit Policy.

d. Double-click on the policy labeled Audit account logon events.

e. Select both Success and Failure.

f. Click OK.

g. Double-click on the policy labeled Audit logon events.

h. Select both Success and Failure.

i. Click OK.

j. Take a screenshot.

k. In the control panel click System and Security and Administrative tools.

l. Double-click Event Viewer.

m. Click Windows Logs and Security.

n. Take a screenshot.

o. Lock your desktop by clicking +L. (Logging off will also require a log on. Make sure to save all of your work before logging off.)

p. Log on to your computer by clicking your username and entering your password.

q. Reopen Event Viewer if it is not already open.

r. Click Security.

s. Take a screenshot. (The new log on event should be displayed.)

t. Double-click on the Logon/Logoff event that was just recorded.

u. Take a screenshot.

v. Click OK.

w. Click on Applications and Services Logs and Microsoft Office Sessions.

x. Take a screenshot.

y. Double-click on any event.

z. Take a screenshot.

Briefly explain your experience in 2-3 paragraphs

Your writing must be in English with proper attention to formatting, spelling, grammar, and punctuation.