[This is preliminary documentation and subject to change]

Auditing

You can use security auditing techniques to track the activities of users and to detect unauthorized attempts to access your NTFS directories and files. Activities that you can audit include:

• All logon attempts, both successful and unsuccessful.
• User attempting to access restricted accounts.
• User attempting to execute restricted commands.

This section includes:

• About Auditing: Learn about monitoring and assessing your Web server security.
• Configuring and Monitoring Auditing: Creating security logs.
• Detecting Unauthorized Access: Learn how to interpret security logs for signs of unauthorized access.

This section does not contain information on:

• How to log user Web and FTP site activity; see Logging Site Activity.
• How to control access to your Web and FTP site; see Access Control.

© 1997-2001 Microsoft Corporation. All rights reserved.