Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Rule not working

0 views
Skip to first unread message

Jeff

unread,
Apr 27, 2010, 2:08:07 PM4/27/10
to
I'm trying to setup a rule that will alert me when ever someone uses the
Administrator account whether its local administrator or the domain
administrator.

I can get the rule to work successfully in Windows 2003 Server and lower
operating systems, but cant get the rule to work in Windows 2008 Server. The
user field in the event log says N/A instead of the actual username like it
appears in previous versions of Windows.

Any body know how to get around this issue with Windows Server 2008?

Thank you.

addre...@invalid.invalid

unread,
May 1, 2010, 10:08:47 AM5/1/10
to
Hi Jef, the event id's have changed in w2k8 for the event you are trying
to use. You might want to create a separate rule for this.

Vincent de Vries

unread,
May 1, 2010, 10:18:01 AM5/1/10
to
Jeff, The event id's for this have changed on w2k8, you might wat to add a
separate ruel to pick this up on the w2k8 boxes.

-Vince

0 new messages