For now we do five servers at our location and use the WAN bridge for servers at branch offices, totalling eleven servers. I could only imagine the amount of data from scanning all 200 workstations along with the severs, which have roughly 9 to 10 thousand entries per 4 hour window.
-----Original Message----- From: Patrick Fennessey [mailto:[EMAIL PROTECTED] Sent: Thursday, August 24, 2006 10:01 AM To: Greg Merideth; Lee Clemens; [email protected] Subject: RE: User creation audit trail Do you use GFI event log watcher for all your workstations? Or just servers? -----Original Message----- From: Greg Merideth [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 23, 2006 12:47 PM To: Lee Clemens; [email protected] Subject: RE: User creation audit trail I believe event ID 645 is the creation of a user account in the domain. I use the GFI event log watcher and track that event on the network. -----Original Message----- From: Lee Clemens [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 22, 2006 9:26 PM To: [email protected] Subject: User creation audit trail Hello all, I am trying to find a way to verify and when and by whom a user was created on a Domain computer. The account was created on the local machine, so I'm wondering if it is captured in the event log somewhere. And perhaps what the event ID is for that, or anywhere else I could find out?? Thanks in advance, Lee Clemens ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This email is business confidential. If received in error, please destroy this email and notify sender immediately. Sender does not waive confidentiality, or privilege and use is prohibited. --------------------------------------------------------------------------- ---------------------------------------------------------------------------
