RE: Event ID for changing Inheritance of object permissions

Hello,

Thank you for using newsgroup!

The following record recorded my action of set the "Allow inheritable
permissions from the parent to propagate to this object and all child
objects." option of the container "Domain controllers" in a test
environment.
7/10/2007 6:32:36 PM Security Success Audit Directory Service Access 566
MOM20050\Administrator SHLAB-NNZGIX6VO "Object Operation:
Object Server: DS
Operation Type: Object Access
Object Type: organizationalUnit
Object Name: OU=Domain Controllers,DC=MOM2005,DC=LOCAL
Handle ID: -
Primary User Name: SHLAB-NNZGIX6VO$
Primary Domain: MOM20050
Primary Logon ID: (0x0,0x3E7)
Client User Name: Administrator
Client Domain: MOM20050
Client Logon ID: (0x0,0x311FC)
Accesses: WRITE_DAC

Properties:
WRITE_DAC
organizationalUnit

Additional Info:
Additional Info2:
Access Mask: 0x40000

You can save the event log to text file (like I did) so that you can search
key words like container name in the log file but to read records one by
one.

Hope my reply helps.

Best Regards,

Sean Cai
MCSE2000
Microsoft Online Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • RE: Event log file is corrupt
    ... "The Event Log file is corrupted". ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Event log file is corrupt
    ... > "The Event Log file is corrupted". ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Application Event Log File is Corrupt
    ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... Application Event Log File is Corrupt ...
    (microsoft.public.windows.server.sbs)
  • Re: AspErrorsToNTLog no longer works in IIS6
    ... Am I to assume IIS6 no longer offers a way to audit VBScript errors? ... >>when the security log is full has any relevance. ... Is event log performance significantly ... > log instead of the normal log file) was flawed from a security perspective, ...
    (microsoft.public.inetserver.iis)
  • Re: AspErrorsToNTLog no longer works in IIS6
    ... The security implication is that anonymous remote requests can be used to ... fill the event log and cause the server to stop responding (for very legal ... > logic for further disabling it. ... How about using the web log file? ...
    (microsoft.public.inetserver.iis)