Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com 08-1 8. Thit lp GPO gim st hot dng dng nhp MJC TIU: Gim st su kin dng nhp cua User THJC HIJN: trn server B1. Diu chinh GPO Default Domain Controller Policy Cua s Server Manager: theo duong dn > Click phai Default Domain Controllers Policy > Edit TRUNG TM DO TAO MANG MY TNH NHT NGHJ 105 B Huyn Thanh Quan 205 V Thi Su , Q3, TP. HCM Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com 08-2 Cua s Group Policy Management Editor: theo duong dn > Chon Audit Policy > Click phai Account Logon Events > Properties Hp thoai Audit object access > Chon Success v Failure > OK TRUNG TM DO TAO MANG MY TNH NHT NGHJ 105 B Huyn Thanh Quan 205 V Thi Su , Q3, TP. HCM Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com 08-3 Kt qua Start > Run > Nhp GPUPDATE /FORCE > OK TRUNG TM DO TAO MANG MY TNH NHT NGHJ 105 B Huyn Thanh Quan 205 V Thi Su , Q3, TP. HCM Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com 08-4 B2. Luu log file v xa su kin hin thi Start > Programs > Administrative Tools >Event Viewer TRUNG TM DO TAO MANG MY TNH NHT NGHJ 105 B Huyn Thanh Quan 205 V Thi Su , Q3, TP. HCM Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com 08-5 Hp thoai Event Viewer: theo duong dn > Click phai Security > Clear log Cua s Event Viewer > Save and Clear TRUNG TM DO TAO MANG MY TNH NHT NGHJ 105 B Huyn Thanh Quan 205 V Thi Su , Q3, TP. HCM Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com 08-6 Luu lai file SecEvt071128.evtx Thu nghim trn WS: Trn mn hnh Logon: UserName: KT1, Password: BAYBA (c tnh nhp sai d gia lp truong hop d password). Kim tra: Trn Server Hp thoai Event Viewer: theo duong dn > Click phai Security > Refresh TRUNG TM DO TAO MANG MY TNH NHT NGHJ 105 B Huyn Thanh Quan 205 V Thi Su , Q3, TP. HCM Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com 08-7 Thy trong Log ghi nhn qu trnh dng nhp v chung thuc cua user KT1: Failed