How to audit WHO has shutdown a server?

How to audit WHO has shutdown a server?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
How to audit WHO has shutdown a server? beijder 03-09-2006
Posted by =?Utf-8?B?YmVpamRlcg==?= on March 9, 2006, 9:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Using the auditing policy options on a W2K3 server you can audit when a
system has been shutdown, but I want to audit WHO has initiated a shutdown.
This is not recorded in the eventlogs. Does anybody know of a software piece
or way to monitor this?

Thanks,

Guido

Posted by Arek Iskra [MVP] on March 9, 2006, 9:49 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Using the auditing policy options on a W2K3 server you can audit when a
> system has been shutdown, but I want to audit WHO has initiated a
> shutdown.
> This is not recorded in the eventlogs. Does anybody know of a software
> piece
> or way to monitor this?
>
> Thanks,
>
> Guido


Hi Guido,

Have you tried enabling audit of privilege use?

http://technet2.microsoft.com/WindowsServer/en/Library/ee2f85ac-e3fb-4a24-b133-8c7fdfc5cee81033.mspx

--
Arek Iskra
MVP for Windows Server - Software Distribution



Similar ThreadsPosted
Server 2008 shutdown October 31, 2008, 8:58 am
Server 2003 failed logon/logoff audit records December 2, 2005, 4:29 pm
who does a PKI audit? January 31, 2008, 3:40 pm
User audit September 6, 2005, 5:02 am
Audit Admnistrators April 11, 2006, 4:02 pm
"file audit" February 21, 2007, 9:02 am
How do you audit your systems? August 5, 2007, 3:18 pm
Internal Audit question September 22, 2005, 12:49 pm
Re: Audit Account Management June 15, 2005, 1:15 am
Audit Account Management June 14, 2005, 2:19 pm

The site map in XML format XML site map

Contact Us | Privacy Policy