|
Posted by S. Pidgorny on October 4, 2007, 4:57 am
If you were Registered and logged in, you could reply and use other advanced thread options
No, that would be account logon event showing that information.
--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-
* http://sl.mvps.org * http://msmvps.com/blogs/sp *
> Hi,
>
> Windows Security log shows certain files deleted by an user account. Does
> the log (event id 560) show where the user logged in (local machine,
> network pc or etc)?
>
> Thanks!
>
|