

Known as Internet Access Server (IAS) and Network Access Protection (NAP). Network Policy Server a role that can be added to Server 2008,Īs well as the Microsoft’s RADIUS Server role. Provides IPsec support for authentication, encryption, and integrity at the Network Policy Server subcategory belong somewhere else. Our opinion, the three IP Security (IPsec)-related subcategories and the You to track the use of Terminal Services, screensaver logons, and so forth. Nothing to do with logon or logoff activity. Those two events are logged by the Logon and Logoff subcategories.Īs for the other seven subcategories, some of them have No matter which type of account (i.e., domain or local) or which type of logon session (e.g., interactive, network, remote desktop) the Logon/Logoff category generates a logon event and a logoff event at the beginning and end of each logon session. Logon events, which track access to a given computer. As we discussedĮarlier, there is a subtle difference between authentication events, which areĬovered by the Account Logon events discussed in the previous chapter, and As the name implies, the Logon/Logoff category’s primary purpose is toĪllow you to track all logon sessions for the local computer.


Logon/Logoff events in the Security log correspond to the Audit logon events policy category, which comprises nine subcategories.
