|
|
|
Forum Newbie
Group: Forum Members
Last Login: 11/17/2009 4:22:59 AM
Posts: 3,
Visits: 0
|
|
| The field "Privileges" in most of the Account Management events is most of the time empty. Does anyboe have any idea of whose privileges this is supposed to display? E.g. 624 - User Account Created. Does it show the privileges granted to the created user at the moment of account creation or on the other hand the privileges of the account initiating this action? I googled the entire internet and MSDN but failed to find anything on this topic. Would be grateful if someone could shed some light on this. Thanks in advance.
|
|
|
|
|
Expert
Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329,
Visits: 0
|
|
| This is one of those fields that you can ignore
|
|
|
|
|
Forum Newbie
Group: Forum Members
Last Login: 11/17/2009 4:22:59 AM
Posts: 3,
Visits: 0
|
|
| I understand this. But still, this would be nice to know what Microsoft wanted this field to actually display.
|
|
|
|
|
Expert
Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329,
Visits: 0
|
|
| Ha! You are assuming they knew what they were doing. The security log, my friend, is the red headed step child of Windows. It's only in very recent years that it gained a "designated owner". Take what you can get from the security log but try to make every field and every event make sense and you will find yourself in a straightjacket, never to see your family again.
|
|
|
|
|
Forum Newbie
Group: Forum Members
Last Login: 11/17/2009 4:22:59 AM
Posts: 3,
Visits: 0
|
|
 OK! Thanks for the clear and humorous answer 
|
|
|
|
|
Expert
Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329,
Visits: 0
|
|
|
|
|