Event Type:	Success Audit
Event Source:	Security
Event Category:	Policy Change
Event ID:	612
Date:		1/26/2001
Time:		12:16:03 PM
User:		NT AUTHORITYSYSTEM
Computer:	TECRA
Description:
Audit Policy Change:
 New Policy:
 	Success	Failure
 	    -	    -	Logon/Logoff
 	    -	    -	Object Access
 	    -	    -	Privilege Use
 	    -	    -	Account Management
 	    +	    +	Policy Change
 	    -	    -	System
 	    -	    -	Detailed Tracking
 	    -	    -	Directory Service Access
 	    -	    -	Account Logon
 Changed By:
 	User Name:	TECRA$
 	Domain Name:	MTG
 	Logon ID:		(0x0,0x3E7)

Поделитесь материалом с коллегами и друзьями