On Wed, 20 Oct 2010, jonr@destar.net wrote:
> Rationale is subjective, the others can be monitored through the event viewer.
The event viewer will not provide a full history, and rationale is *very*
important. The event viewer logs specific actions, but more often than not
misses the really important information (tells you policies were applied,
but half the time not to what machine, account, etc.), and you have to
perform your own correlation to guess which logged in administrator might
have possibly performed the actions, etc.
Dude, it's *half*, at best, a config mgmt system.
--Arthur Corliss
Live Free or Die
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Oct 20 09:41:03 2010
This archive was generated by hypermail 2.1.8 : Wed Oct 20 2010 - 09:41:03 AKDT