Small Business Susan

Loggin’ in Vista

Enabling auditing for the Vista KSOD – THE OFFICIAL BLOG OF THE SBS “DIVA”:
http://msmvps.com/blogs/bradley/archive/2008/12/26/enabling-auditing-for-the-vista-ksod.aspx

One more thing about that auditing.  The auditing log file on a Vista box is VERY chatty.  The default file size of 16 megs gets filled up in about a 1/2 days activity on my workstation.  Thus if you want to see if you can grab “it” in action, you’ll either need to increase the log file or set it to archive off.



When it occurs, it should be a specific registry change that should jump out in the log files.  Since normally RpcSs service isn’t one that you can mess with, I changed another service and set up auditing to showcase what it should look like.





2 comments ↓

  • #   Dean on 12.29.08 at 9:14 am     

    “When it occurs, it should be a specific registry change that should jump out in the log files.”

    When what occurs ?


  • #   bradley on 12.29.08 at 9:16 am     

    Click on the upper link — black screen of vista