Hi All:
In going through out Exchange 5.5 logs I came across the following under the
security section:
Special privileges assigned to new logon:
User Name: XX
Domain: XXXXXXXXX
Logon ID: (0x0,0x1A6E02E)
Assigned: SeDebugPrivilege
SeBackupPrivilege
SeChangeNotifyPrivilege
SeRestorePrivilege
SeAuditPrivilege
Is this anything to worry about? Has someone increased their rights to
perform any malicious act?
Also, is there any way to track IP addresses in the event logs? In other
words, instead of seeing so and so logged in to such and such workstation,
we would like to see the IP address. I know it shows it for pop 3 clients
but does it show it for Outlook clients?
Many thanks..
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
