What Event ID
Home > IT Answers > DataCenter > What Event ID
Newbiepeon
5 pts.
0
Q:
What Event ID
Servers, Event ID
What is the best event id to search on when you suspect someone is purposely copying and deleting & moving files on the server
ASKED: Jan 24 2008  3:24 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
Jerry mx
15 pts.
0
A:
 RATE THIS ANSWER
+1
Click to Vote:
  •   1
  •  0
  • AddThis Social Bookmark Button
You first would have to enable Object Auditing (see ) and the look for Event ID's 560 on the Security Tab in Event Viewer.

Hope this is helpful.
Last Answered: Jan 24 2008  5:11 PM GMT by Jerry mx   15 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



0