User tracking in Active Directory (W2K)

[apumphrey]

How would one track the actions of a user in an AD domain? Specifically: files accessed, paths taken, login/out attempts etc. To my knowledge AD security policies allow you only to restrict access not track actions. Any insight is appreciated!

[rexregum]

Hi:)
Event Viewer is the tool you use to track these events. The security log tracks logon success/failure, object access and much more. If you right click log cathegory, you can specify filters, to include/exclude events of interest.