Auditing Windows 2000
In Windows 2000, auditing provides a means of tracking events
and is an important facet of security for individual computers
as well as the enterprise. As described in other chapters
(notably Chapter 6, which covers the Event Viewer), Microsoft
defines an event as any significant occurrence in the operating
system or an application that requires users (particularly
administrators) to be notified. Events are recorded in event
logs that you can manage with the Event Viewer console
snap-in.
