Auditing Windows 2000

In Windows 2000, auditing provides a means of tracking events and is an important facet of security for individual computers as well as the enterprise. As described in other chapters (notably Chapter 6, which covers the Event Viewer), Microsoft defines an event as any significant occurrence in the operating system or an application that requires users (particularly administrators) to be notified. Events are recorded in event logs that you can manage with the Event Viewer console snap-in.