EventID: Difference between revisions
Jump to navigation
Jump to search
(Created page with "Bunch of usefull/related Windows Event ID's ==shutdown== 1074,1076,12,6008,41 ==logon== 4624 {| class="wikitable" |- ! Logon Type !! Description |- | 2 || Interactive (log...") (change visibility) |
No edit summary (change visibility) |
||
Line 27: | Line 27: | ||
{| class="wikitable" | {| class="wikitable" | ||
|- | |- | ||
! ID !! Description | ! ID !! oldID || impact||Description | ||
|- | |||
|4756 ||660|| Low|| A member was added to a security-enabled universal group. | |||
|- | |||
|4757|| 661|| Low|| A member was removed from a security-enabled universal group. | |||
|- | |||
|4732|| 636|| Low|| A member was added to a security-enabled local group. | |||
|- | |||
|4733|| 637|| Low|| A member was removed from a security-enabled local group. | |||
|- | |||
|4728|| 632|| Low|| A member was added to a security-enabled global group. | |||
|- | |- | ||
| | |4729|| 633|| Low|| A member was removed from a security-enabled global group. | ||
|} | |||
==ADDS== | |||
{| class="wikitable" | |||
|- | |- | ||
! ID !! Description | |||
|- | |- | ||
|5136 ||A directory service object was modified. | |5136 ||A directory service object was modified. | ||
|} | |} |
Revision as of 10:20, 19 August 2014
Bunch of usefull/related Windows Event ID's
shutdown
1074,1076,12,6008,41
logon
4624
Logon Type | Description |
---|---|
2 | Interactive (logon at keyboard and screen of system) |
3 | Network (i.e. connection to shared folder on this computer from elsewhere on network) |
4 | Batch (i.e. scheduled task) |
5 | Service (Service startup) |
10 | RemoteInteractive (Terminal Services, Remote Desktop or Remote Assistance) |
groups
ID | oldID | impact | Description |
---|---|---|---|
4756 | 660 | Low | A member was added to a security-enabled universal group. |
4757 | 661 | Low | A member was removed from a security-enabled universal group. |
4732 | 636 | Low | A member was added to a security-enabled local group. |
4733 | 637 | Low | A member was removed from a security-enabled local group. |
4728 | 632 | Low | A member was added to a security-enabled global group. |
4729 | 633 | Low | A member was removed from a security-enabled global group. |
ADDS
ID | Description |
---|---|
5136 | A directory service object was modified. |