does event 540 me distinguish between user , administrator access? this event generated ypon successfull logon, logon exactly? successful logon on system? is there other way log administrator access system using event viewer? thank valuable response georges hi, as far know, cannot distinguish between user , administrator access event 540. more information, please refer to: event id: 540 http://www.microsoft.com/technet/support/ee/transform.aspx?prodname=windows+operating+system&prodver=5.0&evtid=540&evtsrc=security&lcid=1033 events 528 , 540 http://blogs.msdn.com/b/ericfitz/archive/2004/12/09/279282.aspx regards, bruce this posting provided "as is" no warranties, , confers no rights. please remember click "mark answer" on post helps you, , click "unmark answer" if marked post not answer question. can beneficial other community members reading thread.
Comments
Post a Comment