Logs Servidores

Windows 2003 Server
Eventos de Auditoria
•
•
•
•
•
•
•
•
•
•
•

Security,Logon/Logoff
Security,Logon/Logoff
Security,Policy Change
Security,Account Management
Security,AccountManagement
Security,Account Management
Security,Account Management
Security,Account Management
Security,Account Management
Security,Account Management
Security,Account Management

540,Logon538,Logoff
612,Audit Policy Change
624,User Account Created
627,Change Password Attempt
628,User Account password set
630,User Account Deleted
642,User Account Changed
644,User Account Locked Out629,User Account Disabled
626, User Account Enabled

Windows 2003 Server
Eventos de Auditoria
•
•
•
•
•

Security,Account Management,631,Security Global Group
Security,AccountManagement,632,Security Global Group
Security,Account Management,633,Security Global Group
Security,Account Management,634,Security Global Group
Security,Account Management,641,Security Global Group

•
•
••
•

Security,Account Management,635,Security Local Group Created
Security,Account Management,636,Security Local Group Member Added
Security,Account Management,637,Security Local Group MemberRemoved
Security,Account Management,638,Security Local Group Deleted
Security,Account Management,639,Security Local Group Changed

•
•
•

Security,Account Management,645,Computer Account CreatedSecurity,Account Management,646,Computer Account Changed
Security,Account Management,647,Computer Account Deleted

Created
Member Added
Member Removed
Deleted
Changed

Eventos de AuditoriaWindows 2003 Server
Dumpel

C:\>dumpel -format dtcIus -d 1 -l security -c -m security -e 644 -s S01DC -f S01DC.txt

Windows 2008 Server
Eventos de Auditoria
•
•
•
•
•
•
•
•
•
••
•

Security,Logon/Logoff
Security,Logon/Logoff
Security,Policy Change
Security,Account Management
Security,Account Management
Security,Account Management
Security,Account Management...