Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Event viewer question (deciphering user action)

Status
Not open for further replies.

zaresa

IS-IT--Management
Apr 9, 2002
72
US
I am trying to figure out what action the user took by looking at Event Viewr as I suspect some security breeches. Event Viewer describes the category as "Privilege Use" with an Event ID = 576. Can I get any more detailed information than this?
 
Here is some more info....

Event ID: 576

Source: Security

Type: Success Audit

Description: Special privileges assigned to new logon: User Name: Administrator Domain: CORPIIS01 Logon ID: (0x0,0x2DB2A) Assigned: SeChangeNotifyPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege

Comments: Special privileges assigned to new logon
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top