there is more..... http://www.eventid.net/display.asp?eventid=1000 <http://www.eventid.net/display.asp?eventid=1000&source> &source= http://www.eventid.net/display.asp?eventid=1202 <http://www.eventid.net/display.asp?eventid=1202&source> &source= -----Original Message----- From: Hasan Çolpan [mailto:hcolpan@xxxxxxxxxxxx] Sent: Monday, September 30, 2002 08:51 To: [ExchangeList] Subject: [exchangelist] event log 1000 and 1202 http://www.MSExchange.org/ Hi, I have SBS and E2k. I get event 1000 and 1202. I read Q279432, Q247482, Q260715. I could not found problematic user. I have winlogon.log which I got it by secedit /refresh. Any comment. Tanks Hasan Çolpan Tepum Technology Inc. System Engineer MCP & MCSE & CCNA & A+ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: discussions@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')