Windows 2003 Delegation Of control Wizard - Event ID
I am looking for information on the security event ID that is generated when the delegation of control wizard is run to grant rights to a user? Windows 2003 Domain. Anyone?
April 7th, 2011 4:35pm

you say "the" security event id. I don't think there is any. the wizard just changes permissions on one or several AD objects. if you audit explicitly the permission changes on the affected objects and have Directory Services Access auditing enabled globally, you will see some audit events in the security log after running the wizard. But there would not be any specific "DoCW event". The delegation of control can be done various way of which the DoCW wizard is only one option. It may log some event, possibly, but how would you detect the other delegation ways such as running DSACLS from command line or modifying the permissions directly from a script or executable? I doubt there is any DoCW specific event logged at all. ondrej.
Free Windows Admin Tool Kit Click here and download it now
April 7th, 2011 9:03pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics