If you are like most administrators, you want to know who is logging on, to which computer, and accessing resources on your servers. For your Windows computers and Active Directory environment, you ...

Auditing capability in Microsoft Windows Server has always been a somewhat unsophisticated affair: either filling up event logs so quickly that they truncate or spiralling out of control. Extraneous ...

Have you ever scrolled through the Windows Server DHCP logs in the Notepad app while trying to troubleshoot something? Then you know that it's a tedious task. There are many alternatives to Notepad ...

Event 4688 documents each program a computer executes, its identifying data, and the process that started it. Several event 4688s occur on your system when you log into a system. For example, Session ...

Having an issue today. It seems like DNS records for various workstations are disappearing from DNS. On the DNS server, I'm seeing DNS 520 events. It looks like the host itself is sending dynamic ...

In Event Viewer, Audit Success is an event that records an audited security access attempt that is successful, whereas Audit Failure is an event that records an audited security access attempt that ...

Any good ideas? One app I've looked at already was Splunk, but the expense of it seems a bit like over kill for my needs. It would have definitely kept auditors at bay.