|
Re: [Veritas-bu] who has deleted or de-activated a policy?
2008-02-12 13:05:04
|
Cant
remember if you use windows, but in the Security log, assuming you have
different user names of who logs onto the system, that may be a way of tracking
who last logged on.
wont be
definitive, but it could be a starting point. Otherwise, no.
Simon
On Feb 11, 2008 11:09 PM, Tanveer Ahmed <ahmed.tanveer AT ubl.com DOT pk>
wrote:
Is there a any way to determine who has deleted or de-activated a policy?
Technically, no. And since the people making policy changes
typically also have administrative rights to the systems, it won't be foolproof
anyway (unless you send these logs off to a secure syslog server
somewhere).
We have a text file containing our own changelog. If we catch
somebody not updating the changelog when he's made a change, we let him have
it. Peer pressure works fairly well.
..../Ed
--
Ed Wilts, Mounds View, MN,
USA
mailto:ewilts AT ewilts DOT org
This email (including any attachments) may contain confidential and/or
privileged information or information otherwise protected from disclosure.
If you are not the intended recipient, please notify the sender
immediately, do not copy this message or any attachments and do not use it
for any purpose or disclose its content to any person, but delete this
message and any attachments from your system. Astrium disclaims any and all
liability if this email transmission was virus corrupted, altered or
falsified.
---------------------------------------------------------------------
Astrium Limited, Registered in England and Wales No. 2449259
REGISTERED OFFICE:-
Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England
|
_______________________________________________
Veritas-bu maillist - Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
|
|
|
