Auditing (W2K)

[blueyedthing]

I want to see if users are attempting to create shortcuts, can see this with auditing if so how???

[kastetx]

yes you can. object access, special privilages audit should do. i do not remember event id numbers though. However: regular users cannot create accounts. So why do you care if they try? Also, if an admin will create an account, you will see it. So unless you have other reasons (which you very well may have) maybe you shouldnt clutter up your event log.