'evntwin.exe' bug on Windows Server 2008
when switch on audit policy on windows 2008 server registering maximum events, can see among others event id 4656. event correspond event 560 in windows 2003 (and older). then when start 'evntwin' , try make custom settings, don'e see event such id in events lists old ids , if add these (old) events nothing events transfered destination. necessary windows 2008 snmp service settings made successfully. using 'evntcmd' command new event ids don't bring success.
simultaneously similar configuration made windows 2003 system , work successfully.
, when use 'evntwin' utility in windows 2008 in list of events have items 'success' severity , old ids (below 4096) though have correct setup audit policy.
in widows 2003 haven't such problem , can select events different severity.
simultaneously similar configuration made windows 2003 system , work successfully.
, when use 'evntwin' utility in windows 2008 in list of events have items 'success' severity , old ids (below 4096) though have correct setup audit policy.
in widows 2003 haven't such problem , can select events different severity.
hi alex,
yes, noticed, evntwin.exe tool on windows server 2008 not contain updated security events vista , windows server 2008; in addition, severiy level contains "success". report issue product group. thank feedback.
laura zhang - msft
yes, noticed, evntwin.exe tool on windows server 2008 not contain updated security events vista , windows server 2008; in addition, severiy level contains "success". report issue product group. thank feedback.
laura zhang - msft
Windows Server > Management
Comments
Post a Comment