|
Posted by Roger Abell [MVP] on December 4, 2006, 12:48 pm
Please log in for more thread options
One could get at the data in structures of the OS with debugger.
As for an OS provided user interface, about the only place I have
noticed Logon IDs is in event logs.
--
Roger Abell
Microsoft MVP (Windows Server : Security)
> Hello
> When I create a user in Active Directory the eventlog writes something
> like this:
> -----------------------------------------------------------
> User Account Created:
> New Account Name: test
> New Domain: ABIZ
> New Account ID: ABIZ\test
> Caller User Name: Administrator
> Caller Domain: ABIZ
> Caller Logon ID: (0x0,0x258A8)
> Privileges -
> Attributes:
> Sam Account Name: test
> Display Name: <value not set>
> User Principal Name: -
> Home Directory: <value not set>
> Home Drive: <value not set>
> Script Path: <value not set>
> Profile Path: <value not set>
> User Workstations: <value not set>
> Password Last Set: <never>
> Account Expires: <never>
> Primary Group ID: 513
> AllowedToDelegateTo: -
> Old UAC Value: 0x0
> New UAC Value: 0x15
> User Account Control:
> Account Disabled
> 'Password Not Required' - Enabled
> 'Normal Account' - Enabled
> User Parameters: <value changed, but not displayed>
> Sid History: -
> Logon Hours: <value not set>
> -----------------------------------------------------------
> Are there any way of looking up who or what the "Caller Logon ID" is?
>
> Best regards,
> Lars Skjoldby
> http://www.abusiness.dk
>
| 
XML Sitemap