Know when other logs are cleared (Windows... Expand / Collapse
Author
Message
Posted 9/7/2011 4:59:50 PM
Expert from Quest Software

Expert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest SoftwareExpert from Quest Software

Group: Forum Members
Last Login: 2/11/2012 12:15:37 AM
Posts: 18, Visits: 8
I thought I would post this for whomever may be interested:

If you're concerned about any other logs being cleared, e.g the system or application logs, or even a windows event log made by a 3rd party application,  Windows 2008 produces Event ID 104 in the System log whever that happens.  This shows "Whodunit" in the "User" field (unlike all security events in 2008, where they abandoned the User field...! ), and the Description will tell you the log name. 

Hope this helps...! 

Post #798
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 5:48pm