Re: Eventlog

From: Oliver (oliver@greyhat.de)
Date: 10/10/02


From: oliver@greyhat.de (Oliver)
Date: 10 Oct 2002 07:39:36 -0700


Hi,

1) you can define this at the group policy (afaik there are some other
places, too). Just start "mmc" and load the plugin.

2) There is no "build-in" list for the event-ids.

You can download the documentation from Lan-selm (gfi-software), which
contains a list of the most common id's! For special ID's have a look
at microsofts page!

PS: Anyone knowing a windows logforwarder working whith SyslogNG?

Bye,

Oliver Karow

Søren Schimkat <schimkat@musik.auc.dk> wrote in message news:<3DA27E21.2090503@musik.auc.dk>...
> Hi everyone
>
> I'm in the middle of building a centralized logging infrastructure
> aorund a SUN box... but I can't figure out how to control the logging on
> the Windows2000 server. My main problems are:
>
>
> 1: Where do I define that I want to see all user logons at any computer
> in the domain - and stuff like that?
>
> 2: Where can I se a list of all the event id's
>
>
> If you know the answer... please let me know.
>
> Regards Søren Schimkat