Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
security log auditing
0 views
Skip to first unread message
b33zy
Dec 10, 2007, 6:55:02 PM12/10/07
to
I have an alert that is raised if anyone is added to the local MOM
Administrators group on any of our three management servers. In the security
event log is shows the username of the person added fine. However, in the MOM
alert it shows the user's SID instead. Does anyone know why this is or how to
convert the SID to a username?
Administrators group on any of our three management servers. In the security
event log is shows the username of the person added fine. However, in the MOM
alert it shows the user's SID instead. Does anyone know why this is or how to
convert the SID to a username?
Anders Bengtsson
Dec 11, 2007, 3:09:07 AM12/11/07
to
Hi b33zy,
You can make sure that your MOM rule collect all parameters of the event.
Also I know there is a regkey that you can change to show friendly names
instead of SID.
-----
Regards
Anders Bengtsson
Microsoft MVP - MOM
http://www.contoso.se
b> MOM alert it shows the user's SID instead
b>
Anders Bengtsson
Dec 11, 2007, 3:10:10 AM12/11/07
to
Hi b33zy,
You can make sure that your MOM rule collect all parameters of the event.
Also I know there is a regkey that you can change to show friendly names
instead of SID.
-----
Regards
Anders Bengtsson
Microsoft MVP - MOM
http://www.contoso.se
b> MOM alert it shows the user's SID instead
b>
b33zy
Dec 11, 2007, 7:18:07 PM12/11/07
to
Anders,
Thanks for the help. Do you know how to tell MOM to collect event
parameters? I'm not sure i've seen an option for that.
As far as the regkey if anyone knows that would be great.
Thanks
0 new messages