ne 17, 2004 10:03 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what ev
ent Event ID is logged and where?
According to this source
http://www.monitorware.com/en/events/details.asp?details_id=1865
Windows 2000's event id is 1573.
Todd
-Origin
Eric Fleischman [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, June 16, 2004 3:02 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] When a domain is Switch to Native
> Mode... what ev ent Event ID is logged and where?
>
> Yee of little faith!
> We will log this. I don't r
M
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] When a domain is Switch to Native
> Mode... what ev ent Event ID is logged and where?
>
> Yee of little faith!
> We will log this. I don't recall the event message on 2k, but 2k03 it
> would be ID 16408 with text of some
MAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Wednesday, June 16, 2004 4:24 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] When a domain is Switch to Native Mode... what
ev ent Event ID is logged and where?
Interesting question. My expectation was that on
Interesting question. My expectation was that only the audit logs would
show this change. There is no app/ntds log entry that I've ever heard of.
If you're looking for a modified time stamp, you could look at the attribute
itself and see if it gives the info you're after.
http://msdn.microsoft