Hi Michael,
Thanks for reply.
But in my case almost All the Windows Security Audit events Comes with User
Name N/A. Same thing is happening in Windows Server 2008 OS.
For example ,Event id 592 in windows 2003 will be generated when new
process created.It will have The User name in User field of event properties
so we can know this process or EXE is launched by that User.
But alternate to Event id 592 in windows vista Event id 4688 will be
generated But this will show User N/A in event properties.
Any solution?
Deepak Jha
"Michael Walraven" wrote:
> On my Vista Home Premium, some do, some don’t have a 'user'.
>
> Entries that do not have a user (N/A) appear to me to be ones that occur at
> the OS level without a User established or in control.
>
> Michael
>
>
> "Deepak Jha" <> wrote in message
> news:42BFDF78-F145-4034-8C5E-...
> > Hi,
> > When i am opening Eventviewer in windows vista.and Double click any
> > events.User field in Event properties Shows N/A.Previously in windows 2000
> > and windows 2003 OS It was showing the Username who generated that event.
> > Is anybody aware of this changes and also Any setting has to be done
> > to
> > get User name in event properties.
> >
> > Thanks in Advance
> >
> >
> > Deepak Jha
> >
> >
|
Similar Threads
Linear Mode
