Re: logon events

Steven L Umbach schrieb:

Not offhand but what you can try is a registry snapshot program such as the free regshot. Take a snapshot on a computer just before you enable it and then again after you enable. Then compare the snapshots. I am sure it would be in HKLM. Curious that you would need to use the registry as you can use Group Policy to configure audit policy on domain computer and import security templates configured as you need into non domain computers using the secedit command. If you use regshot to track down user settings just remember to make the changes in HKEY_CURRENT_USER as regshot will show the setting but for the HKEY_USERS with the user SID.

Steve

http://www.snapfiles.com/get/regshot.html --- Regshot


Hello Steven,

we don't have a AD, we use ( can I say that in this mailinglist ) samba as PDC.

Bye
Andreas
.

Relevant Pages

  • Re: logon events
    ... Not offhand but what you can try is a registry snapshot program such as the ... If you use regshot to track down user settings just ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Exporting Windows XP Services Settings
    ... "Regshot is a small, free and open-source registry compare utility that allows you to quickly take a snapshot of your registry and then compare it with a second one - done after doing system changes or installing a new software product. ...
    (microsoft.public.windowsxp.general)