Auditing Changes in Windows Server 2003 SP1

re: Auditing Changes in Windows Server 2003 SP1

Pavel Lebedinsky — Tue, 21 Dec 2004 03:20:00 GMT

> As background, some privileges are not audited when used...

What is the reason for this? Performance?

re: Auditing Changes in Windows Server 2003 SP1

Drew — Tue, 21 Dec 2004 15:14:00 GMT

Sounds useful but its a pity that this could not be set on a group by group basis. Unless I am missing something... (more than likely!)

Per-User Selective Audit in Windows Server 2003

Sergey Simakov blog — Wed, 22 Dec 2004 12:10:00 GMT

re: Auditing Changes in Windows Server 2003 SP1

Eric Fitzgerald — Wed, 22 Dec 2004 17:58:00 GMT

The privileges originally excluded from audit were just too noisy- for example, SeChangeNotifyPrivilege (bypass traverse checking) is used in practically every access to the file & registry.

Per-group auditing is under consideration post-Longhorn. It poses significant technical challenges to implement.

Windows Security Logging and Other Esoterica

strawberryJAMM's Security and User Experience WebL — Thu, 23 Dec 2004 00:53:00 GMT

I discovered that one of the colleagues on my team - Eric Fitzgerald, the

Windows Security Logging and Other Esoterica

strawberryJAMM's Security and User Experience WebL — Thu, 23 Dec 2004 06:55:00 GMT

I discovered that one of the colleagues on my team - Eric Fitzgerald, the

Per-User Selective Audit in Windows Server 2003

Sergey Simakov blog — Fri, 24 Dec 2004 10:27:00 GMT

Keeping the noise down in your security log

Windows Security Logging and Other Esoterica — Tue, 11 Jan 2005 23:02:00 GMT

Keeping the noise down in your security log

Windows Security Logging and Other Esoterica — Wed, 12 Jan 2005 03:18:00 GMT

Keeping the noise down in your security log

Windows Security Logging and Other Esoterica — Mon, 17 Jan 2005 09:27:00 GMT

WS03 User based auditing

Learning to Fly - Mika's Blog — Wed, 03 Aug 2005 17:23:55 GMT

WS03 User based auditing

Learning to Fly - Mika's Blog — Wed, 03 Aug 2005 17:25:25 GMT

WS03 User based auditing

Learning to Fly - Mika's Blog — Wed, 03 Aug 2005 17:50:32 GMT

Windows Security Blogs » Blog Archive » Auditing Changes in Windows Server 2003 SP1

Wed, 14 Mar 2007 02:18:52 GMT

PingBack from http://winblogs.security-feed.com/2004/12/20/auditing-changes-in-windows-server-2003-sp1/

Parolele Windows şi recomandări în rapoarte de audit. Dileme din practică

Adrian Munteanu - Jurnal de optimist — Tue, 17 Apr 2007 17:02:11 GMT

Deşi subiectul este destul de sensibil, risc. Mă frămîntă de vreo cîteva zile unele lucruri descoperite

Windows Security Logging and Other Esoterica Auditing Changes in | debt consolidator

Fri, 19 Jun 2009 18:24:49 GMT

PingBack from http://mydebtconsolidator.info/story.php?id=19320