Archived from groups: microsoft.public.win2000.security (
More info?)
Agreed. Just to be clear, there is no native way in Windows 2000 to log the
IP address for events such as Windows networking logons, unless you look at
firewall logs from a third party firewall.
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:eGkAq9yKFHA.3356@TK2MSFTNGP12.phx.gbl...
> You can enable auditing of logon events via security policy for that
server
> and then look in the security log for logon events which may show the name
> or IP of the computer logging on. If the computer name shows and it is a
lan
> computer you can ping it or check dns/wins/DHCP for IP information. If it
is
> a computer from outside of your network you can check the firewall logs
> possibly correlating them to events in the security log. Of course you
want
> to keep the firewall and server in synch timewise. For web servers, the
IIS
> logs can show the IP addresses of website users if logging is enabled for
> the website. --- Steve
>
>
> "Thomas" <Thomas@discussions.microsoft.com> wrote in message
> news:5F8A3E68-4012-4825-B3AD-8DC5D405304B@microsoft.com...
> > How can I see an IP address in the event viewer from a computer that is
> > remote that is trying to logon to the server?
> >
> > I know it can be done but cannot find it anywhere.
> >
> > Thanks
>
>
Facebook
Twitter
Instagram