Re: Win2k Audit Logs - What happened here?

From: H C <keydet89(at)yahoo.com>
Date: Mon Dec 16 2002 - 16:41:32 EST

 

> We turned on windows 2000 auditing for a particular

Have you thought of asking the user? Also, since the events you posted are all success events, it would seem that the user is performing authorized activities...so, what's the point?

> So, what you guyz think? .

Honestly? You really need to put more thought into what auditing you enable.

---

Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Mon Dec 16 18:14:10 2002