[windows2000] Re: Tracking who shut down a PC
- From: "Jim Kenzig http://ThinHelp.com" <jkenzig@xxxxxxxxx>
- To: windows2000@xxxxxxxxxxxxx
- Date: Mon, 9 Jan 2006 11:45:31 -0800 (PST)
Heh not unless you are good at taking fingerprints off the ctrl-alt-delete keys
and then that may not be anygood even...there is still shutgui.exe that as long
as you can access it you can shut it down remotely. You should enable the
security log to monitor logoff/login and that will at least give you the user.
See:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/monitor/logonoff.mspx
JK
----- Original Message ----
From: Robert K Coffman Jr - Info From Data <bcoffman@xxxxxxxxxxxxxxxx>
To: windows2000@xxxxxxxxxxxxx
Sent: Monday, January 09, 2006 2:03:23 PM
Subject: [windows2000] Re: Tracking who shut down a PC
There is a registry entry that I believe is called "ShutdownWithoutLogin" that
you should verify is off. Kind of hard to audit who shut down a system when
they weren't logged in, I found ;)
- Bob Coffman
-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Jonathan Jesse
Sent: Monday, January 09, 2006 12:27 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Tracking who shut down a PC
Iâm trying to track down who shutdown a windows 2000 box. Is there a way
through event log to figure out who did this. I tried using google and
couldnât come up with anything useful
Jonathan Jesse
Network Administrator
Founders Trust Personal Bank
616-575-3776
jjesse@xxxxxxxx
This page and any accompanying documents contain confidential information
intended for a specific individual and purpose. If you are not the intended
recipient you are hereby notified that any disclosure, copying, distribution,
or use of the information contained herein (including any reliance thereon) is
strictly prohibited. If you received this transmission in error, please
immediately contact the sender and destroy the material in its entirety,
whether in electronic or hard copy format.
Other related posts:
