Hi guys / gals Anyone have a good resource for looking up Windows 2008 security event ids? I used to use the old Windows 2000 website from MS which has served me well, to the extent that I know my 644s and 539s off by heart, but now in 2008 they all appear to have changed, I've got 4740s and 4625s coming out of my ears as I try and track down some suspicious account activity. Any good pages out there - I can't find one after a bit of Googling unfortunately...
TIA, JRR -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
