I believe event ID 645 is the creation of a user account in the domain.
I use the GFI event log watcher and track that event on the network.
-Original Message-
From: Lee Clemens [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 22, 2006 9:26 PM
To: focus-ms@securityfocus.com
Subject: User
What is the consensus of the group on the use of whole disk encryption in
an enterprise environment?
---
---
That is something that has been proposed for laptops within the Federeal
sector.
Beleive it is a good idea for mobile laptop users in any sector as well.
Data is much more valuable than systems, and there continues to be a need
to protect the data whethere it is in a mobile laptop or even a PDA
-Original Message-
From: Sarah [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 24, 2006 11:48 AM
To: focus-ms@securityfocus.com
Subject: Whole disk encryption
What is the consensus of the group on the use of whole disk encryption in
an enterprise environment?
Why? You only
