How to set event logs on AD Domain controller

Question

I want to be able to see the event logs for all users and machines connected to our domain. I would imagine that the events logs would have to be read from the Domain controllers hosting AD. My question is 'To do this would the event logs have to be configured in AD itself or configured on the local end of the Domain controller hosting AD? So that all I would have to do is type in the event code from event viewer on that server which I imagine should bring up every user account related to that code?

Answer 1

Sounds like you're asking about setting up an event collector. Something here may help.
https://learn.microsoft.com/en-us/windows/win32/wec/windows-event-collector

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hi,

Just checking in to see if the information provided was helpful.

Please let us know if you would like further assistance.

Best Regards,
Vicky