http://blogs.technet.com/mhunecke/archive/tags/Autentica_26002300_231_3B0026002300_227_3B00_o/default.aspxTags: Autentica&#231;&#227;oen-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/mhunecke/archive/2008/11/27/como-identificar-a-distribui-o-de-logon-entre-os-domain-controllers.aspxFri, 28 Nov 2008 05:47:00 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3160522mhunecke0http://blogs.technet.com/mhunecke/comments/3160522.aspxhttp://blogs.technet.com/mhunecke/commentrss.aspx?PostID=3160522<P style="TEXT-INDENT: -0.25in; MARGIN: 0in 0in 0pt 0.5in; mso-list: l0 level1 lfo1" class=MsoListParagraph><SPAN style="mso-ansi-language: PT-BR; mso-fareast-font-family: Calibri; mso-bidi-font-family: Calibri" lang=PT-BR><SPAN style="mso-list: Ignore"><FONT size=3 face=Calibri>1)</FONT><SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>Usando&nbsp;a ferramenta&nbsp;<A title="Download EventCombMT" href="http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&amp;displaylang=en" mce_href="http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&amp;displaylang=en">EventCombMT</A>: </FONT></FONT></SPAN></P> <P style="TEXT-INDENT: -0.25in; MARGIN: 0in 0in 0pt 1in; mso-list: l0 level2 lfo1" class=MsoListParagraph><SPAN style="mso-ansi-language: PT-BR; mso-fareast-font-family: Calibri; mso-bidi-font-family: Calibri" lang=PT-BR><SPAN style="mso-list: Ignore"><FONT size=3 face=Calibri>a.</FONT><SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>Filtrar por eventos Security, Sucess, Event ID 540.<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p></FONT></FONT></SPAN></P> <P style="TEXT-INDENT: -0.25in; MARGIN: 0in 0in 0pt 1in; mso-list: l0 level2 lfo1" class=MsoListParagraph><SPAN style="mso-ansi-language: PT-BR; mso-fareast-font-family: Calibri; mso-bidi-font-family: Calibri" lang=PT-BR><SPAN style="mso-list: Ignore"><FONT size=3 face=Calibri>b.</FONT><SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>No campo </FONT></FONT></SPAN></SPAN></SPAN></SPAN><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>Server selecionar TODOS Domain Controllers</FONT></FONT></SPAN></P> <P style="TEXT-INDENT: -0.25in; MARGIN: 0in 0in 0pt 1in; mso-list: l0 level2 lfo1" class=MsoListParagraph><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR></SPAN><SPAN style="mso-ansi-language: PT-BR; mso-fareast-font-family: Calibri; mso-bidi-font-family: Calibri" lang=PT-BR><SPAN style="mso-list: Ignore"><FONT size=3 face=Calibri>c.</FONT><SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>Clicar em SEARCH<o:p></o:p></FONT></FONT></SPAN></P> <P style="TEXT-INDENT: -0.25in; MARGIN: 0in 0in 0pt 0.5in; mso-list: l0 level1 lfo1" class=MsoListParagraph><SPAN style="mso-ansi-language: PT-BR; mso-fareast-font-family: Calibri; mso-bidi-font-family: Calibri" lang=PT-BR><SPAN style="mso-list: Ignore"><FONT size=3 face=Calibri>2)</FONT><SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>O EventCombMT gerará X arquivos texto dependendo do número de DCs</FONT></FONT></SPAN></P> <P style="TEXT-INDENT: -0.25in; MARGIN: 0in 0in 0pt 0.5in; mso-list: l0 level1 lfo1" class=MsoListParagraph><SPAN style="mso-ansi-language: PT-BR; mso-fareast-font-family: Calibri; mso-bidi-font-family: Calibri" lang=PT-BR><SPAN style="mso-list: Ignore"><FONT size=3 face=Calibri>3)</FONT><SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>Abrir cada TXT e contar a quantidade de linhas de cada arquivo (observar a data do primeiro evento, pois alguns DCS podem estar com Log de segurança maior que outro DC)<o:p></o:p></FONT></FONT></SPAN></P> <P style="TEXT-INDENT: -0.25in; MARGIN: 0in 0in 0pt 0.5in; mso-list: l0 level1 lfo1" class=MsoListParagraph><SPAN style="mso-ansi-language: PT-BR; mso-fareast-font-family: Calibri; mso-bidi-font-family: Calibri" lang=PT-BR><SPAN style="mso-list: Ignore"><FONT size=3 face=Calibri>4)</FONT><SPAN style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN></SPAN></SPAN><SPAN style="mso-ansi-language: PT-BR" lang=PT-BR><FONT size=3><FONT face=Calibri>Montar uma tabela e se necessário um gráfico com estes dados.<o:p></o:p></FONT></FONT></SPAN></P><img src="http://blogs.technet.com/aggbug.aspx?PostID=3160522" width="1" height="1">Autentica&#231;&#227;oEventCombMTDomain Controller