Re: Detecting time change

From: Iikka Meriläinen (Iikka.Merilainen@pato.vaala.fi)
Date: 11/28/02


From: "Iikka Meriläinen" <Iikka.Merilainen@pato.vaala.fi>
Date: Thu, 28 Nov 2002 18:30:05 +0200

Hi!

Yes, it's possible. Open Local Security Policy manager, then open Local
Policies, then Audit Policy. Enable success/failure auditing for Audit
privilege use. Then you'll see appropriate events (along with many more) in
the Security event log.

--
Best regards,
Iikka Meriläinen
Vaala, Finland
==================================================
Please reply to the newsgroup only so that others can learn from this issue.
This message is provided "as is", with absolutely no warranties.
==================================================
"MacroMad" <username@email.co.yu> wrote in message
news:as5alb$o86l9$1@ID-131597.news.dfncis.de...
> Is there a way to detect system time change in windows 2000 after the
> acctual change?
>
> eg. App is executed after system time change. Is there a way of detecting
> that system time has been tempered with. Os used is Windows 2000 Pro.
>
>
>


Relevant Pages

  • Re: Lock down sign to one user
    ... Open Local Security Policy - secpol.msc and go to local policies/user rights ... For instance you could have just administrators and the specified user ... > only login to that PC and set logon hour restrictions but I want to ...
    (microsoft.public.security)
  • Re: Local Policy
    ... Every time that I open local security policy and select access this ... Maybe you could tell a bit about the crash - what caused it, ... Is the W2K computer running as a domain controller? ...
    (microsoft.public.windowsxp.network_web)
  • Re: Problems saving current security configuration to template
    ... Otherwise open Local Security Policy and ... > and backup all my current settings in Win2k and in WinXP ...
    (microsoft.public.win2000.security)
  • Local Policy
    ... I have a XP Pro SP2 machine that I am trying to see with a W2K machine. ... Every time that I open local security policy and select access this ... I am signed in as the administrator. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Resetting all local policies to default on XP Pro via command line
    ... Tell him to boot into Safe Mode and logon as an administrator and then to ... open Local Security Policy and remove the rules he created but to leave the ...
    (microsoft.public.security)