All NT events are reported through Event Viewer. You access Event Viewer through the Administrative Tools program group. By default, only system and application messages are logged. You can, however, enable auditing, which provides feedback on a number of security-related events and provides a greater level of detail about what is taking place on the system.
12.6.1. Configuring Event Viewer
You might want to change a few settings in Event Viewer. To do so, open Event Viewer, and choose Log Log Settings to open the Event Log Settings dialog box, which is shown in Figure 12.15. Click the Change Settings For drop-down menu to configure ...