Greetings
I use dumpel rather extensively for debugging account lockout problems.
Since our support group upgraded us to SP2, I notice that the "message"
portion of the event log information appears to be missing.
NOTE: The issue is the SP level of the machine running DUMPEL, not the SP
level of the machine who's event log you are dumping.
I've tried this on two seperate SP2 systems and on a system that is still
SP1, and the results are consistant.
Does anyone have an idea of what is happening ???
e.g.
prior to SP2 upgrade
8/8/2005 4:11:35 PM 8 2 538 Security xxxxx\yyyyy zzzzzzzz User Logoff: User
Name: zzzzzzz Domain: zzzzzz Logon ID: (0x0,0xB6F20E) Logon Type: 3
post SP2 upgrade
11/1/2005 11:16:59 AM 8 2 538 Security xxxx\yyyy$ zzzzzz xxxxxx xxxxxx
(0x0,0x4D66962) 3
Villy Madsen CISA ISP
Information Security
ATCO I-Tek
Bus: (780) 420-5093
Cell: (780) 975-0110
Fax: (780) 420-3916
Mailto:Villy.Madsen@atcoitek.com
4MB Edmonton
The information transmitted is intended only for the addressee and may
contain confidential, proprietary and/or privileged material. Any
unauthorized review, distribution or other use of or the taking of any
action in reliance upon this information is prohibited. If you received this
in error, please contact the sender and delete or destroy this message and
any copies.