Security Event Log

  • Thread starter Thread starter Andrew
  • Start date Start date
A

Andrew

Hi,

Windows Security log shows certain files deleted by an user account. Does
the log (event id 560) show where the user logged in (local machine, network
pc or etc)?

Thanks!
 
No, that would be account logon event showing that information.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Andrew" <andrew@andrew.com> wrote in message
news:uFU0tqbBIHA.4880@TK2MSFTNGP03.phx.gbl...
> Hi,
>
> Windows Security log shows certain files deleted by an user account. Does
> the log (event id 560) show where the user logged in (local machine,
> network pc or etc)?
>
> Thanks!
>
 
Back
Top