Question : Server 2003 Audit Policy

I want to change logon event and directory service acces event auditing.  On my GPO Editor: Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy these items are set for Sucess.  Yet when I go into edit them the check boxes are grayed out so they can't be changed.  Where is this being controlled from?

Is there a script, program (already installed on 2003) that I can run that will show me these settings - effective GPOs - what's on or off, enabled or disabled?

Answer : Server 2003 Audit Policy

So your editing Group Policy on a domain controller and the option to change loggin was turned off? Or are you changing it through the Domain Controller Policy.

Run this command "rsop.msc"

This will open a list of all the policies applied to the computer and the username

Alternatively you can run gpresult from the command line