Any Way To Get Machine Name for Client in Event ID 560?
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Any Way To Get Machine Name for Client in Event ID 560?

 
Post new topic   Reply to topic    Windows Server Forum Index -> Security
Author Message
Will
Guest
Posted: Mon Nov 14, 2005 8:38 am    Post subject: Any Way To Get Machine Name for Client in Event ID 560? Reply with quote
Is the client computer name somehow encoded into an Event ID 560 message?
I clearly see the domain and username, but I just can't believe that
Microsoft doesn't make the machine IP address and authenticated Windows
computer name visible in the event ID 560. That's very critical
information when you are trying to chase down a security breach.

--
Will
Back to top
Steven L Umbach
Guest
Posted: Mon Nov 14, 2005 9:50 am    Post subject: Re: Any Way To Get Machine Name for Client in Event ID 560? Reply with quote
Since you know the user name you could look for logon events [assuming
auditing of logon events is enabled] for that user which should show the
computer name. --- Steve
Back to top
Will
Guest
Posted: Mon Nov 14, 2005 9:50 am    Post subject: Re: Any Way To Get Machine Name for Client in Event ID 560? Reply with quote
Unfortunately, that part of the event log has been lost.

No alternatives?

--
Will
Back to top
Steven L Umbach
Guest
Posted: Mon Nov 14, 2005 9:50 am    Post subject: Re: Any Way To Get Machine Name for Client in Event ID 560? Reply with quote
Not that I know of. --- Steve
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Security All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB