Installation Users

[Guest]

I am running a Windows 2000 server. It was for the longest time a file
server, but when logging in this morning, someone added terminal services to
it. And now its an application terminal server. Is there a way to determine
who might have installed this application, maybe logs or even a freeware
program.

Thanks in advance!!

 

[Myweb]

Hello John,

So ask your administrator collegues, that must be done with an administrative
account. Or somebody knows the administrator password.

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[Guest]

John,

I'd have to agree with Myweb... It's got to be someone with administrative
privelages (or someone knows your local/domain admin password).
Good luck with sorting your mess out.

Stan

 

[Guest]

The whole point of my question is to find out proof who might have added the
app. I know who has access, but I want to see what user made the change.

John

 

[Bob I]

Mayby, just maybe, the OWNER of the new subdirectory will tell you.

 

[Guest]

Quick question...
Are you using any third party printer drivers?

 

[Guest]

That sounds very helpful.....but what new subdirectory and where?

 

[Myweb]

Hello John,

You can enable Auditing on your local security policy for the server. But
that can only help you for the future, not now to find out who did it.

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[Myweb]

Hello John,

Here are some more infos about security logging:
http://www.microsoft.com/technet/se...ndmonitoring/securitymonitoring/smpgch02.mspx

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.