Re: Security event log

On Tue, 13 Dec 2005 11:39:02 -0800, dwc
<dwc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

>Could anyone direct me to an article or tell me what distinguishes events
>being recorded in the security event log as opposed to the application event
>log? i.e what sort of events?

Events surrounding access to objects, system resources in terms of
modification of permissions, accessing the objects, failure to access
those objects etc. are all in the security. Any event that is logged
regarding application health (or lack of), configuration etc. is
recorded in the application log.
There are some odd exceptions here and there.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wes/wes/using_windows_event_log.asp

.

Relevant Pages

  • Re: Web application security problem
    ... Usually it is helpful to look in the security event log for logon audit info ... login event happened when the failure occurred. ... enabled for both success and failure. ...
    (microsoft.public.dotnet.security)
  • cifs and rpcss logon failures
    ... I recently discovered these two failure entries in my security event log on ... Service Ticket Request: ... see Help and Support Center at ...
    (microsoft.public.windows.server.security)
  • Failed Security Audit
    ... The Domain Controller's Security Event log is constantly giving the ... Event Type: Failure Audit ... Service Ticket Request Failed: ... I've tried removing each Workstation from the Domain and rejoining - it ...
    (microsoft.public.win2000.security)