Re: Changeing of object ownership detection via Event Viewer

From: Eric Fitzgerald [MSFT] (ericf@online.microsoft.com)
Date: 01/30/03 

From: "Eric Fitzgerald [MSFT]" <ericf@online.microsoft.com>
Date: Wed, 29 Jan 2003 18:03:04 -0800

Audit the "Write Owner" permission (only), for Everyone, for success (only),
for all objects that you're interested in.

Eric 

-- 
Eric Fitzgerald
Program Manager, Windows Auditing and Intrusion Detection
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
"Calan" <calin@temasoft.ro> wrote in message
news:083d01c2c38d$0eb20cf0$d2f82ecf@TK2MSFTNGXA09...
> Hi, I need to detect changes of file/object ownership in
> windows 2000 useing MS Event Viewer.
> Can you please tell me what event/combination of events
> with what parameters are logged when a change of ownership
> occurs.
> Thank you in advance.

Relevant Pages

  • Re: Xbox 360 Extender Frustrating Problem
    ... Please post the exact text of the message you see in Event Viewer. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... however when I end a connection of either it will not ...
    (microsoft.public.windows.mediacenter)
  • Re: FRS Error 13562. Help!
    ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > other machines. ... When looking at the event viewer I get the following ...
    (microsoft.public.windows.server.active_directory)
  • Re: 360 Sesion Terminated
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... However, under system in the event viewer, 3 messages ... ditto entered the running state. ...
    (microsoft.public.windows.mediacenter)
  • Re: Xbox Extender immediatly disconnects and gives error
    ... What is the specific error text that you see in Event Viewer? ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > I was using XP firewall, but have since disabled it all together. ...
    (microsoft.public.windows.mediacenter)
  • Re: WINWORD8 OLE PROBLEM
    ... Have you used event viewer in XP to look at the Application event log to ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > word opens and then crashes after about 5 seconds with fatal error message ...
    (microsoft.public.fox.programmer.exchange)
Loading