I am trying to figure out what action the user took by looking at Event Viewr as I suspect some security breeches. Event Viewer describes the category as "Privilege Use" with an Event ID = 576. Can I get any more detailed information than this?
Description: Special privileges assigned to new logon: User Name: Administrator Domain: CORPIIS01 Logon ID: (0x0,0x2DB2A) Assigned: SeChangeNotifyPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege
Comments: Special privileges assigned to new logon
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.