Page:1/6
10/3/2005 3:39:47 PM
Object delete operations
Description
Allows reporting on all collected events from the monitored systems.
For more information on various Windows events, go to :
http://www.microsoft.com/technet/support/eventserrors.mspx
Parameters
Database Servers
All
Computers
All
Accounts
All
Sources
Security
Categories
Object Access
IDs
560
Logs
Security
Types
Success Audit
Message Search Criteria
Include events with any of the message text keywords: Delete
Time Frame
Today
Start Date Time
2005-10-03 00:00:00
End Date Time
2005-10-04 00:00:00
Server
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
10/3/2005 3:39:36 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Object Access\All successful object access operations.mhtml
New Handle ID: 1180
Operation ID: {0,254763434}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:39:33 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Object Access\All successful object access operations.mhtml
New Handle ID: 1232
Operation ID: {0,254763302}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:39:10 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Object Access\All object access operations.mhtml
New Handle ID: 1180
Operation ID: {0,254760291}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:39:09 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Object Access\All object access operations.mhtml
New Handle ID: 1232
Operation ID: {0,254760213}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:38:48 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Object Access\All failed object access operations.mhtml
New Handle ID: 1140
Operation ID: {0,254757153}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:38:47 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Object Access\All failed object access operations.mhtml
New Handle ID: 1140
Operation ID: {0,254755914}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:38:22 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\TS_All session disconnects-reconnects.mhtml
New Handle ID: 1140
Operation ID: {0,254752375}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:38:22 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\TS_All session disconnects-reconnects.mhtml
New Handle ID: 1196
Operation ID: {0,254752347}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:37:59 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\TS_All logon-logoff successes.mhtml
New Handle ID: 1164
Operation ID: {0,254748320}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:37:59 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\TS_All logon-logoff successes.mhtml
New Handle ID: 1196
Operation ID: {0,254748292}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:37:48 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\TMPDF7.tmp
New Handle ID: 1164
Operation ID: {0,254746889}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:37:25 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All logon-logoff successes.mhtml
New Handle ID: 812
Operation ID: {0,254742708}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:37:25 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All logon-logoff successes.mhtml
New Handle ID: 1196
Operation ID: {0,254742680}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:37:08 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All logon-logoff events.mhtml
New Handle ID: 1196
Operation ID: {0,254738938}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:37:07 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All logon-logoff events.mhtml
New Handle ID: 1196
Operation ID: {0,254738909}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:36:54 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All logon failures.mhtml
New Handle ID: 1232
Operation ID: {0,254736280}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:36:53 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All logon failures.mhtml
New Handle ID: 812
Operation ID: {0,254736219}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
Page:2/6
10/3/2005 3:39:47 PM
Server
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
10/3/2005 3:36:36 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Administrator account logon failures.mhtml
New Handle ID: 1180
Operation ID: {0,254732804}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:36:36 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Administrator account logon failures.mhtml
New Handle ID: 1180
Operation ID: {0,254732719}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:36:24 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Account lockouts.mhtml
New Handle ID: 812
Operation ID: {0,254730133}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:36:24 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Account lockouts.mhtml
New Handle ID: 812
Operation ID: {0,254730087}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:35:53 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\TMPDF1.tmp
New Handle ID: 1180
Operation ID: {0,254726588}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:33:59 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Domain Administrator account logon successes.mhtml
New Handle ID: 812
Operation ID: {0,254718390}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:33:58 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Domain Administrator account logon successes.mhtml
New Handle ID: 812
Operation ID: {0,254718346}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:33:42 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Domain Administrator account logon failures.mhtml
New Handle ID: 1196
Operation ID: {0,254715659}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:33:42 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\Domain Administrator account logon failures.mhtml
New Handle ID: 1196
Operation ID: {0,254715630}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:33:12 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All domain account logon successes.mhtml
New Handle ID: 1180
Operation ID: {0,254711946}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:33:12 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All domain account logon successes.mhtml
New Handle ID: 1232
Operation ID: {0,254711779}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:32:56 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All domain account logon failures.mhtml
New Handle ID: 812
Operation ID: {0,254708277}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:32:56 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All domain account logon failures.mhtml
New Handle ID: 812
Operation ID: {0,254708243}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:32:38 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All domain account logon events.mhtml
New Handle ID: 1196
Operation ID: {0,254705087}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:32:38 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Logon - Logoff\All domain account logon events.mhtml
New Handle ID: 1196
Operation ID: {0,254705004}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:29:19 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Events\Event Rule Set.mhtml
New Handle ID: 1196
Operation ID: {0,254691772}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:29:18 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Events\Event Rule Set.mhtml
New Handle ID: 812
Operation ID: {0,254691676}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:28:56 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Events\All Windows Events.mhtml
New Handle ID: 1196
Operation ID: {0,254688918}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:28:54 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Events\All Windows Events.mhtml
New Handle ID: 1196
Operation ID: {0,254687381}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
ReadAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:27:49 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\2004 Business Plan\Screenshots 10-05\mhtml copies\Account Management\User accounts creations and deletions.mhtml
New Handle ID: 812
Operation ID: {0,254681119}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: cmcgary
Client Domain: SHARKS
Client Logon ID: (0x0,0xF29A64C)
Accesses DELETE
READ_CONTROL
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes

Privileges -
  
LOGCASTER SERVER
10/3/2005 3:27:49 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
cmcgary
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Sha