Lansweeper logo
Home Download Features Demo Buy now Help Support forum
 
    Most requested support articles:
  Lansweeper troubleshooting guide.
  The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
  WMI Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
  How to configure the windows firewall using group policies.
  Support:  
 support@lansweeper.com  
Skype: Lansweeper  
  Mo-Fri 9h-17h CET  
Welcome Guest Search | Active Topics | Log In | Register

Untag as favorite
Event Log Scanning for New User Activity
rclements
#1 Posted : Wednesday, June 30, 2010 8:56:13 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 4
Hi,
I'm trying to build a custom report that uses the tblntlogevent table and tblComputers to display recent event logs that confirm actions like User Account Creation, User Account Deletion, and User Account Disablement on Domain Controllers. These event logs are Security event log id 624, 630, and 629, respectively. I cannot display these events when I filter on the EventCode column for them, however other codes do work. I think this is because they are not there, and they are not there because they are Success Audits.

Correct me if I'm wrong, but it seems that Lansweeper filters out Success Audits, focusing solely on Failures, Warnings, etc. Is that correct. If so, is there a way to enable it, or filter for particular event ids when running active scanning?
Lansweeper
#2 Posted : Thursday, July 01, 2010 8:52:48 AM

Rank: Administration

Groups: Administration, Premium Users
Posts: 10,369
The current version scans only errors & warnings.
Users browsing this topic
Guest
Untag as favorite
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

Contact: E-mail Lansweeper - Skype : Lansweeper
Copyright 2004 - 2011 © Hemoco bvba