Using AuthzReportSecurityEvent

From: Chris Stagnaro (ChrisStagnaro_at_discussions.microsoft.com)
Date: 09/27/04 

Date: Mon, 27 Sep 2004 11:33:06 -0700

I am trying to report Audit Events from our application into the Security Log
on Windows Server 2003 using the AuthzReportSecurityEvent Security API. On
Windows 2000 we were using ReportEvent, which worked because of a bug in the
API, which has subsequently been fixed.

Currently I am making a call to AuthzReportSecurityEvent with no paramaters
and it returns a success, however nothing is written to the security log.

I've tried to also provide a list of paramaters to this call by passing an
array of AUDIT_PARAM. However in this case GetLastError returns 87 (The
parameter is incorrect). I have not been able to find any example code or
any documentation that outlines any additional steps that need to be taken to
actually get this method to work. All I have been able to find is the basic
SDK pages that give the syntax for each method call.

Does anyone have an idea what else needs to be done to make this work? It
is running as a service and has the necessary audit privilege set already.

Thanks,
Chris

Relevant Pages

  • AuthzReportSecurityEvent
    ... I am trying to report Audit Events from our application into the Security Log ... on Windows Server 2003 using the AuthzReportSecurityEvent Security API. ...
    (microsoft.public.platformsdk.security)
  • how to allow a user access to our server event logs?
    ... We want to setup a user on our domain with access to our Windows Server 2003 event logs, specifically the security log. ...
    (microsoft.public.windows.server.general)
  • Re: KSecDD - Login Process
    ... www.ilopia.com - FAQ and Tutorials for Windows Server 2003 ... "Mike" wrote in message ... > I am checking my Security log on my NT box and I cam across the following: ...
    (microsoft.public.windows.server.general)
  • Re: Security Log Warning
    ... Try renaming the security log file manually. ... Microsoft MVP: Windows Server ... my Server 2003 machine I get a "Security Log Full" warning. ...
    (microsoft.public.windows.server.general)