[aklug] Re: windoze 7 sucks

Quoting Arthur Corliss <acorliss@nevaeh-linux.org>:

> On Wed, 20 Oct 2010, jonr@destar.net wrote:
>
>> Rationale is subjective, the others can be monitored through the
>> event viewer.
>
> The event viewer will not provide a full history, and rationale is *very*
> important. The event viewer logs specific actions, but more often than not
> misses the really important information (tells you policies were applied,
> but half the time not to what machine, account, etc.), and you have to
> perform your own correlation to guess which logged in administrator might
> have possibly performed the actions, etc.
>
> Dude, it's *half*, at best, a config mgmt system.
>
> --Arthur Corliss
> Live Free or Die
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
Which config file holds the rationale for linux changes? One
administrator has their ideas on what is the right and another has
their own ideas as to what is right. If you are only seeing half the
picture then you need to turn up the verbosity and accounting with the
event viewer or make custom views that meet your criteria. Don't let
people log on as admin and when they have to elevate their privs it
will be logged.

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Oct 20 09:48:49 2010