charset="windows-1252"
cool thanks ill give it a try.
Graeme
:
y to
ny
m
ock.html> - "I detest life-insurance agents: they always argue that I shall=
some day
Good news everyone, you have just received and e-mail from me!
Marie von Ebner-Eschenbach
- "Even a stopped clock is right twice a day."
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ ~
charset="windows-1252"
cool thanks ill give it a try.Graeme=
On 8 February 2010 16:25, KenM You could use eventcombmt
=A0
=A0
=A0
On Mon, Feb 8, 2010 at 11:13 A=
If you =
have remote administration access enabled workstations (GPO firewall except=
ion needed, if you don=92t), you could perform a WMI query to Win32_NTLogEv=
ent for the pertinent event IDs and username.
=A0=
an>
-Mike=
span>
=A0=
an>
From: [mailto:] On Behalf Of Graeme CarstairsSent: Monday, February 08, 2010 10:00 AM
=A0
Hi,
=A0
We have a requirement to scan all the security logs =
for all the PC's, laptops and servers in a domain to see if a user atte=
mpted to logon to any off them over a weekend.
=A0
Does anyone know of something that could pull all th=
e logon failures from these logs and let me look at them to see if that use=
is listed.
=A0
Thanks
=A0
Graeme
-- Good news everyone, you=
have just received and e-mail from me!Stephen =
Leacock =A0- "I detest life-insurance agents: they always argue th=
at I shall some day die, which is not so."
=A0=A0
=A0
=A0
=A0
=A0
-- Good new=
s everyone, you have just received and e-mail from me!Marie von Ebner-Eschenbach =A0- "Even a stopped cl=
ock is right twice a day."
| Article list | Name | Date |
| Click Here | Graeme Carstairs |
||
| Click Here | Michael Waltonen |
||
| Click Here | Christopher Bodnar |
||
| Click Here | KenM |
||
| Currently Viewing : This Article | Graeme Carstairs | 2010-02-08 16:29:51 |