Back to Blog
Event id 1004 detection of product5/22/2023 Logon ID allows you to correlate backwards to the logon event (4624) as well as with other events logged during the same logon session. Logon ID is a semi-unique (unique between reboots) number that identifies the logon session. Windows 2000: Start > Settings > Control Panel > Administrative Tools > Event Viewer Windows NT4: Start > Programs > Administrative Tools (Common) > Event Viewer In the 'Applications' section you should find warnings from event source 'MsiInstaller' with IDs 10.Event Log Source: MSInstaller Event ID: 1004 Detection of product. Account Domain: The domain or - in the case of local accounts - computer name. Application Event Log Source: MSInstaller Event ID: 1001 Detection of product.The user and logon session that performed the action. Free Active Directory Change Auditing Solution.Windows Event Collection: Supercharger Free Edtion.Free Security Log Quick Reference Chart.You will see a series of other User Account Management events after this event as the remaining properties are punched down, password set and account finally enabled. This event is logged both for local SAM accounts and domain accounts. The user identified by Subject: created the user identified by New Account.Īttributes show some of the properties that were set at the time the account was created.
0 Comments
Read More
Leave a Reply. |