| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814254} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 884 Operation ID: {0,397803} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:48:58 AM | Jul 15, 2003 11:48:58 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\MSOHEV.DLL New Handle ID: 916 Operation ID: {0,447161} Process ID: 2464 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 852 Operation ID: {0,789196} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:14 AM | Jul 15, 2003 11:19:14 AM | Object Open: Object Server: Security Account Manager Object Type: SAM_DOMAIN Object Name: Builtin New Handle ID: 889984 Operation ID: {0,68965} Process ID: 232 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: testWS02$ Client Domain: test Client Logon ID: (0x0,0x3E7) Accesses GetLocalGroupMembership LookupIDs Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:14 AM | Jul 15, 2003 11:19:14 AM | Object Open: Object Server: Security Account Manager Object Type: SAM_SERVER Object Name: SAM New Handle ID: 723144 Operation ID: {0,69229} Process ID: 232 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: testWS02$ Client Domain: test Client Logon ID: (0x0,0x3E7) Accesses EnumerateDomains LookupDomain Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:20 AM | Jul 15, 2003 11:45:20 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396550} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 848 Operation ID: {0,789037} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 808 Operation ID: {0,710111} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 808 Operation ID: {0,710084} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814123} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 896 Operation ID: {0,711278} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:57 AM | Jul 15, 2003 11:19:57 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\MSOHEV.DLL New Handle ID: 1208 Operation ID: {0,152851} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:05 PM | Jul 15, 2003 12:24:05 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 268 Operation ID: {0,785183} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 896 Operation ID: {0,711209} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 896 Operation ID: {0,711134} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396790} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 852 Operation ID: {0,789109} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:24 AM | Jul 15, 2003 11:19:24 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Yahoo!\Messenger New Handle ID: 968 Operation ID: {0,88715} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:48:48 AM | Jul 15, 2003 11:48:48 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\MSOHEV.DLL New Handle ID: 896 Operation ID: {0,438668} Process ID: 2392 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:14 AM | Jul 15, 2003 11:19:14 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\OUTLLIB.DLL New Handle ID: 480 Operation ID: {0,69273} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 992 Operation ID: {0,815383} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:20 AM | Jul 15, 2003 11:45:20 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396659} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 896 Operation ID: {0,711197} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:37 AM | Jul 15, 2003 11:19:37 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Yahoo!\Messenger\res_msgr.dll New Handle ID: 200 Operation ID: {0,109298} Process ID: 1896 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:14 AM | Jul 15, 2003 11:19:14 AM | Object Open: Object Server: Security Account Manager Object Type: SAM_SERVER Object Name: SAM New Handle ID: 723144 Operation ID: {0,68956} Process ID: 232 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: testWS02$ Client Domain: test Client Logon ID: (0x0,0x3E7) Accesses EnumerateDomains LookupDomain Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:28 AM | Jul 15, 2003 11:19:28 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Yahoo!\Messenger\XMLParse.dll New Handle ID: 32 Operation ID: {0,94561} Process ID: 1896 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 808 Operation ID: {0,710195} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814242} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:41:46 AM | Jul 15, 2003 11:41:46 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1 New Handle ID: 1496 Operation ID: {0,345544} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 260 Operation ID: {0,710072} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 776 Operation ID: {0,788108} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:20 AM | Jul 15, 2003 11:45:20 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396639} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 776 Operation ID: {0,788388} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:14 AM | Jul 15, 2003 11:19:14 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\OUTLLIB.DLL New Handle ID: 484 Operation ID: {0,69292} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses READ_CONTROL SYNCHRONIZE ReadData (or ListDirectory) ReadEA ReadAttributes Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814359} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814126} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 884 Operation ID: {0,397615} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814135} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:49:38 AM | Jul 15, 2003 11:49:38 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10\FRONTPG.EXE New Handle ID: 1796 Operation ID: {0,460558} Process ID: 2464 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses READ_CONTROL SYNCHRONIZE ReadData (or ListDirectory) ReadEA ReadAttributes WriteAttributes Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 884 Operation ID: {0,397642} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:05 PM | Jul 15, 2003 12:24:05 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 268 Operation ID: {0,785027} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 992 Operation ID: {0,815230} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:05 PM | Jul 15, 2003 12:24:05 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 268 Operation ID: {0,785114} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:31 AM | Jul 15, 2003 11:45:31 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\1033 New Handle ID: 260 Operation ID: {0,398956} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 260 Operation ID: {0,710051} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396691} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:31 AM | Jul 15, 2003 11:45:31 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\1033\ID_028.DHS New Handle ID: 260 Operation ID: {0,398960} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses READ_CONTROL SYNCHRONIZE ReadData (or ListDirectory) ReadEA ReadAttributes Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:07 AM | Jul 15, 2003 11:19:07 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\VMware\VMware Workstation\vmware-authd.exe New Handle ID: 2720 Operation ID: {0,61815} Process ID: 220 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:18:50 AM | Jul 15, 2003 11:18:50 AM | Object Open: Object Server: Security Account Manager Object Type: SAM_SERVER Object Name: SAM New Handle ID: 723144 Operation ID: {0,51908} Process ID: 232 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: testWS02$ Client Domain: test Client Logon ID: (0x0,0x3E7) Accesses DELETE READ_CONTROL WRITE_DAC WRITE_OWNER ConnectToServer ShutdownServer InitializeServer CreateDomain EnumerateDomains LookupDomain Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\INTLDATE.DLL New Handle ID: 244 Operation ID: {0,397243} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:52:00 AM | Jul 15, 2003 11:52:00 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10\MCPS.DLL New Handle ID: 1788 Operation ID: {0,485570} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:08 AM | Jul 15, 2003 11:19:08 AM | Object Open: Object Server: Security Account Manager Object Type: SAM_DOMAIN Object Name: Builtin New Handle ID: 889672 Operation ID: {0,62982} Process ID: 232 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: testWS02$ Client Domain: test Client Logon ID: (0x0,0x3E7) Accesses GetLocalGroupMembership LookupIDs Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:41:31 AM | Jul 15, 2003 11:41:31 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\MSOHEV.DLL New Handle ID: 1352 Operation ID: {0,327714} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 852 Operation ID: {0,789124} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 776 Operation ID: {0,788361} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 848 Operation ID: {0,789028} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 852 Operation ID: {0,789121} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:16 AM | Jul 15, 2003 11:45:16 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\WINWORD.EXE New Handle ID: 1652 Operation ID: {0,392781} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:04 PM | Jul 15, 2003 12:24:04 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 780 Operation ID: {0,784978} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 896 Operation ID: {0,711170} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:41:31 AM | Jul 15, 2003 11:41:31 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\MSOHEV.DLL New Handle ID: 1348 Operation ID: {0,327717} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 776 Operation ID: {0,788168} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:41:46 AM | Jul 15, 2003 11:41:46 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files New Handle ID: 1512 Operation ID: {0,345851} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:00 PM | Jul 15, 2003 12:24:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10\1033 New Handle ID: 208 Operation ID: {0,780101} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 992 Operation ID: {0,815263} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396766} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 852 Operation ID: {0,789085} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:05 PM | Jul 15, 2003 12:24:05 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 268 Operation ID: {0,785006} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 260 Operation ID: {0,710060} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:06:59 AM | Jul 15, 2003 11:06:59 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Templates\1033 New Handle ID: 864 Operation ID: {0,809760} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\INTLDATE.DLL New Handle ID: 888 Operation ID: {0,710796} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:23:59 PM | Jul 15, 2003 12:23:59 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 2328 Operation ID: {0,778830} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 884 Operation ID: {0,397602} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 992 Operation ID: {0,815370} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396715} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:21:00 AM | Jul 15, 2003 11:21:00 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\VMware\VMware Workstation\vmeventmsg.dll New Handle ID: 420 Operation ID: {0,216268} Process ID: 724 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:06:59 AM | Jul 15, 2003 11:06:59 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Templates\1033 New Handle ID: 888 Operation ID: {0,809914} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadAttributes Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:31 AM | Jul 15, 2003 11:19:31 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\OSA.EXE New Handle ID: 1116 Operation ID: {0,98995} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 896 Operation ID: {0,711221} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814314} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:29:40 AM | Jul 15, 2003 11:29:40 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\OUTLLIB.DLL New Handle ID: 1184 Operation ID: {0,277988} Process ID: 1880 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses READ_CONTROL SYNCHRONIZE ReadData (or ListDirectory) ReadEA ReadAttributes Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\INTLDATE.DLL New Handle ID: 984 Operation ID: {0,814777} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 992 Operation ID: {0,815130} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 184 Operation ID: {0,396706} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:19:14 AM | Jul 15, 2003 11:19:14 AM | Object Open: Object Server: Security Account Manager Object Type: SAM_DOMAIN Object Name: testWS02 New Handle ID: 889984 Operation ID: {0,68828} Process ID: 232 Primary User Name: testWS02$ Primary Domain: test Primary Logon ID: (0x0,0x3E7) Client User Name: testWS02$ Client Domain: test Client Logon ID: (0x0,0x3E7) Accesses LookupIDs Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 808 Operation ID: {0,710207} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814302} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:00 PM | Jul 15, 2003 12:24:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10\1033\ID_028.DPC New Handle ID: 208 Operation ID: {0,780103} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses READ_CONTROL SYNCHRONIZE ReadData (or ListDirectory) ReadEA ReadAttributes Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 992 Operation ID: {0,815203} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 992 Operation ID: {0,815170} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 848 Operation ID: {0,788965} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:24:09 PM | Jul 15, 2003 12:24:09 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10 New Handle ID: 776 Operation ID: {0,788188} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:19:00 PM | Jul 15, 2003 12:19:00 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 808 Operation ID: {0,710147} Process ID: 2376 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:29:40 AM | Jul 15, 2003 11:29:40 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10\OUTLLIB.DLL New Handle ID: 1260 Operation ID: {0,277967} Process ID: 1880 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE Execute/Traverse Privileges - | Information | 1 |
| | | | | Jul 15, 2003 12:23:59 PM | Jul 15, 2003 12:23:59 PM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1\MICROS~1\Office10\Startup New Handle ID: 92 Operation ID: {0,779956} Process ID: 2616 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:06:59 AM | Jul 15, 2003 11:06:59 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Templates\1033 New Handle ID: 904 Operation ID: {0,810098} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadAttributes Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:07:01 AM | Jul 15, 2003 11:07:01 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 268 Operation ID: {0,814114} Process ID: 2292 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0x16639) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:41:46 AM | Jul 15, 2003 11:41:46 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\PROGRA~1 New Handle ID: 1496 Operation ID: {0,345895} Process ID: 1184 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |
| | | | | Jul 15, 2003 11:45:21 AM | Jul 15, 2003 11:45:21 AM | Object Open: Object Server: Security Object Type: File Object Name: D:\Program Files\Microsoft Office\Office10 New Handle ID: 884 Operation ID: {0,397722} Process ID: 1904 Primary User Name: user2 Primary Domain: test Primary Logon ID: (0x0,0xD1E9) Client User Name: - Client Domain: - Client Logon ID: - Accesses SYNCHRONIZE ReadData (or ListDirectory) Privileges - | Information | 1 |