No announcements
Found 299026 threads
-
1 VotesAuditing Problem
Event 560, 562, 565 corresponding to event 4674 in server 2008 seemed to be useless (!)Answered | 6 Replies | 4548 Views | Created by dan.bldd - Monday, June 1, 2009 6:32 PM | Last reply by Shems - Wednesday, June 10, 2009 12:11 AM
-
0 Votes
Enabling "Audit Logon Events" for proper AI CAL tracking
I've done some research on AI and have found that I need to enable logon events so that it can track usage.Answered | 2 Replies | 9237 Views | Created by Adam Bertram - Thursday, November 12, 2009 3:23 PM | Last reply by Kim Oppalfens [MVP] - Sunday, November 15, 2009 8:28 PM -
1 Votes
Auditing
If you are using SQL2008 (ent ed) or above, SQL Audit is your best option.Answered | 2 Replies | 1498 Views | Created by Surya.chamala - Tuesday, August 6, 2013 10:41 AM | Last reply by Geert Vanhove DCOD - Tuesday, August 6, 2013 10:52 AM -
0 Votes
ItemOpened Event?
You could try an SPItemEventReceiver, but the supported events listed below do not match "item viewed" which is my interpretation of what you want.Answered | 1 Replies | 5185 Views | Created by boverton - Tuesday, January 6, 2009 4:07 PM | Last reply by Justin Barnes - Tuesday, January 6, 2009 7:59 PM -
0 Votes
Repeated Audit Failure 4625 events
According to your descriptions and the event logs, you could try to clear the kerb tickets cache using "klist -li 0x3e7 purge" command.Answered | 1 Replies | 3785 Views | Created by eyalgolan - Monday, December 28, 2015 8:28 AM | Last reply by Hello_2018 - Monday, December 28, 2015 9:47 AM -
0 Votes
Event 560 - Failure audit citing \\server\share\desktop.ini?
That's how a failure audit works.Answered | 3 Replies | 5929 Views | Created by geek_since_77 - Thursday, November 5, 2009 9:48 PM | Last reply by Gunner999 - Thursday, November 5, 2009 10:54 PM -
1 Votes
sql server Audit incorrect Event time
You can use DATEADD() in this way: SELECT DATEADD(mi, DATEPART(TZ, SYSDATETIMEOFFSET()), 'HERE goes your date') As Olaf correctly ...Answered | 9 Replies | 11024 Views | Created by ArashMasroor - Wednesday, September 10, 2014 7:01 AM | Last reply by ArashMasroor - Saturday, September 13, 2014 7:04 AM -
4 Votes
audit
If you refer to the functionality incotruced in SQL Server 2008 called "Server Audit", then you decide where the audit is written when you create the server audit.Answered | 7 Replies | 1949 Views | Created by SLNSH - Tuesday, May 28, 2013 2:00 PM | Last reply by TiborK - Wednesday, May 29, 2013 7:00 AM -
0 Votes
Admin Audit
Click here to learn more.Answered | 7 Replies | 947 Views | Created by techtiger - Wednesday, July 3, 2019 6:42 PM | Last reply by Kyle.Xu - Friday, July 5, 2019 2:09 AM -
1 Votes
Security Event ID 4656 Audit Failure plugplaymanager
Based on the error message” Process Name:C:\Windows\System32\svchost.exe” and “Accesses:Unknown specific access”, it is hard to detect which one created ...Answered | 2 Replies | 4467 Views | Created by rtobyr - Friday, March 25, 2016 7:17 PM | Last reply by Rick_Li - Monday, March 28, 2016 10:06 AM -
0 Votes
File Audit
Hi, Audit event would be generated for both a success and a failure in Windows XP.Answered | 3 Replies | 1356 Views | Created by sakurai_db - Friday, July 11, 2014 9:29 AM | Last reply by Alex Lv - Tuesday, July 15, 2014 9:35 AM -
0 Votes
"Audit System Events" an option in Default Domain Policy on some DCs
I know Audit System Events is an option in the Default Domain Controller GPO.Answered | 1 Replies | 2734 Views | Created by abreaves - Friday, May 18, 2012 9:19 PM | Last reply by Milos Puchta - Saturday, May 19, 2012 10:36 AM -
4 Votes
SCOM 2007 Data Access Service unable to generate auditing events
For what it's worth, I have this issue as well, expect my SDK account is actually listed as being able to generate security audits.Answered | 10 Replies | 13352 Views | Created by KevinHittle - Wednesday, January 5, 2011 4:23 PM | Last reply by Jeffrey S. Patton - Tuesday, March 20, 2012 4:54 PM -
11 Votes
Logging/Auditing
Shameless plug: you can also use LOGbinder SP which enables auditing on Foundation, exports audit events to the Windows event log and trims the SharePoint ...Answered | 7 Replies | 23751 Views | Created by scastellanos - Thursday, October 22, 2009 7:41 PM | Last reply by drwho42 - Thursday, July 14, 2011 1:11 PM -
0 Votes
mailbox auditing
Hi Risingflight, You need to check admin audit logging when administrator wipes the data on mobile devices, except this, your understanding are all correct.Answered | 1 Replies | 685 Views | Created by Risingflight - Saturday, June 23, 2018 8:00 AM | Last reply by Niko.Cheng - Monday, June 25, 2018 6:57 AM -
0 Votes
Event 672 audit failure after migration to hosted Exchange
We can stop audit failure events from being logged in Event Viewer by editing audit policy.Answered | 2 Replies | 1200 Views | Created by Ken Tyrrell - Monday, November 24, 2014 3:37 PM | Last reply by Amy Wang_ - Friday, December 5, 2014 3:27 AM -
0 Votes
Can't Stop Audit of Object Access to Registry and Other Object Access Events
You might check with AskDS: ...Answered | 2 Replies | 874 Views | Created by CindyKF - Tuesday, June 30, 2015 2:28 PM | Last reply by - Wednesday, July 1, 2015 7:12 AM -
0 Votes
SQL Audit
Hi j.kumar, For all target types(*.sqlaudit file, security log, or application log), the captured audit information is the same.Answered | 3 Replies | 1038 Views | Created by kumar J - Thursday, September 17, 2015 7:51 PM | Last reply by Lydia Zhang - Monday, September 21, 2015 3:35 AM -
1 Votes
audit logs
How many days it takes to get the mailbox audit report, from EAC i clicked (export mailbox audit logs) i have set the time frame for two months. and selected the option for ...Answered | 3 Replies | 983 Views | Created by Risingflight - Monday, November 26, 2018 12:25 PM | Last reply by Risingflight - Thursday, November 29, 2018 12:54 AM -
0 Votes
Excessive login audit events caused by SCCM 2012
There are events from port 58621, 58623, 58624, etc, etc so its not just coming across a single portAnswered | 12 Replies | 2348 Views | Created by DollaBillz217 - Thursday, February 19, 2015 3:02 PM | Last reply by DollaBillz217 - Thursday, February 19, 2015 6:21 PM
No announcements
