Complete Event ID List

Complete Event ID List
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Complete Event ID List Ben 06-29-2005
Posted by =?Utf-8?B?QmVu?= on June 29, 2005, 3:11 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I've recently been assigned the task of starting to phase in auditing for our
network, We've finally come up with a list of what needs to be done and are
starting to implement it slowly.

I have one question that I've been able to find an answer for. Is there
some place on Microsoft's website (or else where) that I can find a complete
list of Event IDs?

I know of this website
http://www.microsoft.com/technet/support/eventserrors.mspx but this doesn't
help me too much as I have to know the Event IDs and not all of them are
listed, for example if I search for "Security" it doesn't list all of the
Event IDs.

Any help would be very helpful.




Posted by Steven L Umbach on June 29, 2005, 8:19 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I don't know of a single place to find all of them. Every I have a few good
links they seem to disappear after a while. The free Windows 2003 Server
Security Guide lists quite a few of them in it in chapter three I believe
and is something any admin should read anyhow. Also the second edition of
the Windows Security Resource kit has a lot of information on auditing
[including it's own chapter] and event ID's. It is not free but in my
opinion WELL worth owning. The first link below may also be a good read for
you on auditing. --- Steve

http://www.microsoft.com/technet/security/topics/auditingandmonitoring/securitymonitoring/default.mspx
http://www.bookpool.com/sm/0735621748 --- Windows Security Resource Kit 2nd
edition
http://www.microsoft.com/technet/security/default.mspx --- TechNet
Security Center where you can download Windows 2003 Server Security Guide
under Security Products and Technologies.

> I've recently been assigned the task of starting to phase in auditing for
> our
> network, We've finally come up with a list of what needs to be done and
> are
> starting to implement it slowly.
>
> I have one question that I've been able to find an answer for. Is there
> some place on Microsoft's website (or else where) that I can find a
> complete
> list of Event IDs?
>
> I know of this website
> http://www.microsoft.com/technet/support/eventserrors.mspx but this
> doesn't
> help me too much as I have to know the Event IDs and not all of them are
> listed, for example if I search for "Security" it doesn't list all of the
> Event IDs.
>
> Any help would be very helpful.
>
>
>



Posted by Joe Richards [MVP] on June 29, 2005, 8:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Actually I am working on a tool to do this called eventiddmp.

http://blog.joeware.net/2005/06/08/31/
http://blog.joeware.net/2005/06/05/30/

It will eventually be posted on my website with the other tools but I haven't
gotten that far yet. If you would like to see a beta version, email me directly
and I will email back a zip file. joe@joeware.net. Forward this email so I know
what you are talking about as I get lots of email.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Ben wrote:
> I've recently been assigned the task of starting to phase in auditing for our
> network, We've finally come up with a list of what needs to be done and are
> starting to implement it slowly.
>
> I have one question that I've been able to find an answer for. Is there
> some place on Microsoft's website (or else where) that I can find a complete
> list of Event IDs?
>
> I know of this website
> http://www.microsoft.com/technet/support/eventserrors.mspx but this doesn't
> help me too much as I have to know the Event IDs and not all of them are
> listed, for example if I search for "Security" it doesn't list all of the
> Event IDs.
>
> Any help would be very helpful.
>
>
>

Similar ThreadsPosted
auto complete February 6, 2006, 7:25 am
scans can not complete July 13, 2008, 1:20 pm
Auto complete will not work on XP Pro Tablet PC February 6, 2006, 7:19 am
Server or Service Accounts complete lockdown? February 13, 2006, 3:41 pm
Is complete access in a win 2003 domain a possibility? May 9, 2007, 11:34 am
centralized event logging? centralized syslog... dumping event log? splunk? February 17, 2007, 2:55 am
Virus List July 26, 2007, 7:16 am
AD object permission list February 2, 2006, 11:07 am
Greyed -out toolbar list March 26, 2006, 5:53 pm
Program White List July 18, 2006, 3:45 pm

The site map in XML format XML site map

Contact Us | Privacy Policy