Exchange Admin Audit Log Event ID 25224
25224: New-MessageClassification Exchange cmdlet issued
This is an event from
Exchange
audit event from
LOGbinder EX
generated by
.
On this page
See also the TechNet article on the cmdlet New-MessageClassification
Free Security Log Resources by Randy
Field | Description |
Occurred | Date and time when Exchange registered the cmdlet. |
Cmdlet | The cmdlet that was issued. |
Performed by | The user who issued the cmdlet. |
Succeeded | "Yes", if succeeded, "No", otherwise. |
Error | "None", if the cmdlet resulted in no error, the error message otherwise. |
Originating server | The host name of the server. |
Object modified | The object that was modified by the cmdlet. |
Parameters | The list of parameters, listing them by the parameter's Name and Value. |
Modified properties | Modified properties, if any (otherwise "n/a"). |
Additional information | Additional information, if any (otherwise "n/a"). |
Supercharger Free Edition
This Event Is Produced By
Which Integrates with Your SIEM
New-MessageClassification Exchange cmdlet issued
Occurred: 12/23/2012 3:26:19 PM
Cmdlet: New-MessageClassification
Performed by: sp2010.com/Users/Joe Taylor
Succeeded: Yes
Error: None
Originating server: SP2010-EX1 (14.02.0328.009)
Object modified: Default\MyMessageClassification
Parameters
Name: Name, Value: [MyMessageClassification]
Name: DisplayName, Value: [New Message Classification]
Name: SenderDescription, Value: [This is the description text]
Modified Properties
Name: classificationID, Old Value: [00000000-0000-0000-0000-000000000000], New Value: [db145471-39d9-4ecb-ac44-2c9eeffd3669]
Name: Id, Old Value: [], New Value: [Default\MyMessageClassification]
Name: displayName, Old Value: [], New Value: [New Message Classification]
Name: senderDescription, Old Value: [], New Value: [This is the description text]
Name: recipientDescription, Old Value: [], New Value: [This is the description text]
Name: RawName, Old Value: [], New Value: [MyMessageClassification]
Name: OrganizationId, Old Value: [], New Value: []
Additional information: CmdletParameters/Parameter/Name= [Name]; CmdletParameters/Parameter/Value= [MyMessageClassification]; CmdletParameters/Parameter/Name= [DisplayName]; CmdletParameters/Parameter/Value= [New Message Classification]; CmdletParameters/Parameter/Name= [SenderDescription]; CmdletParameters/Parameter/Value= [This is the description text]; ModifiedProperties/Property/Name= [classificationID]; ModifiedProperties/Property/OldValue= [00000000-0000-0000-0000-000000000000]; ModifiedProperties/Property/NewValue= [db145471-39d9-4ecb-ac44-2c9eeffd3669]; ModifiedProperties/Property/Name= [Id]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [Default\MyMessageClassification]; ModifiedProperties/Property/Name= [displayName]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [New Message Classification]; ModifiedProperties/Property/Name= [senderDescription]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [This is the description text]; ModifiedProperties/Property/Name= [recipientDescription]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [This is the description text]; ModifiedProperties/Property/Name= [RawName]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [MyMessageClassification]; ModifiedProperties/Property/Name= [OrganizationId]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []
For more information, see http://logbinder.com/support
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection