|
|
|
Forum Newbie
Group: Forum Members
Last Login: 2/9/2017 2:29:36 PM
Posts: 1,
Visits: 0
|
|
ID 4698 tells me when a new scheduled task was created. I need to know which event id will tell me when that task is started. I know that 4700 tells me when that task was enabled, but is need to know when it was started after being enabled.
Thank you
|
|
|
|
|
Junior Member
Group: Administrators
Last Login: 4/13/2009 5:07:47 PM
Posts: 20,
Visits: 0
|
|
| You won't find this in the security log. You can find it in the Microsoft-Windows-TaskScheduler/Operational log. The event ID you're looking for is 100.
|
|
|
|