How to enable an alert for when an account performs an interactive logon
説明
How to create an alert for when an account logs on interactively.
原因
対策
To audit Logon data you need a Change Auditor for Logon Activity license. If you have this license applied, you can create an alert for Interactive Logon as follows:
Open the CA Client
Select the Searches tab
Right click the Folder where you want to create the Search/Alert and select New | New Search
In the bottom pane, select the Who tab
Click Add and select the account you want to alert on
Click OK
Select the What tab
Click the down arrow next to Add and select Subsystem | Logons
Select Interactive and click Add
Select the Alert tab
Click Configure Email and set who the email alerts should be sent to
Check Alert Enabled in the top left
Select the Info tab
Enter a name for the new Search/Alert and click Save