Who shutdown the server
hi,
our server mysteriously rebooted , upon reboot admin had cleared system log. admin says slip of finger - there anywhere (filesystem/registry) shutdown type , username stored?
the application , security eventlogs intact, system event log has been cleared.
thanks
hi,
posting in microsoft technet forums.
if system events auditing has been configured, can check event log information regarding shutting down. if no auditing configured or event log deleted, might need configure settings , wait problem occur again.
audit system events
http://technet.microsoft.com/en-us/library/cc782518(v=ws.10).aspx
regards
kevin
posting in microsoft technet forums.
if system events auditing has been configured, can check event log information regarding shutting down. if no auditing configured or event log deleted, might need configure settings , wait problem occur again.
audit system events
http://technet.microsoft.com/en-us/library/cc782518(v=ws.10).aspx
regards
kevin
Windows Server > Security
Comments
Post a Comment