Re: Can users that reboot a server be tracked?
From: Jonathan Maltz [MS-MVP] (jmaltz_at_mvps.org)
Date: 05/18/04
- Next message: Eric Chamberlain: "Re: Public facing IIS/MSSQL servers in AD?"
- Previous message: Marin Marinov: "Re: auditing question"
- In reply to: cfanetworks: "Can users that reboot a server be tracked?"
- Next in thread: someoneelse: "Re: Can users that reboot a server be tracked?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 17 May 2004 20:37:39 -0400
Hi,
You should be able to see the shutdowns like this:
http://www2.ilopia.com/Windows+Server+2003/FAQ/General/63.aspx
-- --Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC] http://www.visualwin.com - A Windows Server 2003 visual, step-by-step tutorial site :-) http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out here Only reply by newsgroup. I do not do technical support via email. Any emails I have not authorized are deleted before I see them. "cfanetworks" <cfa@cfanetworks.com> wrote in message news:uHdFvpDPEHA.2960@TK2MSFTNGP10.phx.gbl... > I have 2 servers in the domain that are rebooting for some unknown reason. > I need to find a way to track what user is rebooting the server. It does > not reboot over the weekend so I am assuming that there is a user > maliciously rebooting the server. Can it be tracked? > > Jon Skelley > >
- Next message: Eric Chamberlain: "Re: Public facing IIS/MSSQL servers in AD?"
- Previous message: Marin Marinov: "Re: auditing question"
- In reply to: cfanetworks: "Can users that reboot a server be tracked?"
- Next in thread: someoneelse: "Re: Can users that reboot a server be tracked?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
