Security Event Log

[Andrew]

Hi,

Windows Security log shows certain files deleted by an user account. Does
the log (event id 560) show where the user logged in (local machine, network
pc or etc)?

Thanks!

 

[S. Pidgorny]

No, that would be account logon event showing that information.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Andrew" <andrew@andrew.com> wrote in message
news:uFU0tqbBIHA.4880@TK2MSFTNGP03.phx.gbl...
> Hi,
>
> Windows Security log shows certain files deleted by an user account. Does
> the log (event id 560) show where the user logged in (local machine,
> network pc or etc)?
>
> Thanks!
>