User Field of Event properties Doesn't show UserName in windows Vi

[Deepak Jha]

Hi,
When i am opening Eventviewer in windows vista.and Double click any
events.User field in Event properties Shows N/A.Previously in windows 2000
and windows 2003 OS It was showing the Username who generated that event.
Is anybody aware of this changes and also Any setting has to be done to
get User name in event properties.

Thanks in Advance


Deepak Jha

 

[Michael Walraven]

On my Vista Home Premium, some do, some don’t have a 'user'.

Entries that do not have a user (N/A) appear to me to be ones that occur at
the OS level without a User established or in control.

Michael

 

[Deepak Jha]

Hi Michael,
Thanks for reply.

But in my case almost All the Windows Security Audit events Comes with User
Name N/A. Same thing is happening in Windows Server 2008 OS.

For example ,Event id 592 in windows 2003 will be generated when new
process created.It will have The User name in User field of event properties
so we can know this process or EXE is launched by that User.

But alternate to Event id 592 in windows vista Event id 4688 will be
generated But this will show User N/A in event properties.
Any solution?

Deepak Jha