Administrator: Elementary Dr. Watson Page 1 2 3 4 5 6

Elementary Security Audits

The Event Viewer audits the Security. One of the main responsibilities for you, the Administrator, is to control what goes into and out of your computers.

 

When you review the security logs, you may see that someone logged onto your computer. The NT AUTHORITY means the system needs to access your files. 

 

WHOSE system? This log indicates that the anonymous logon came from a workstation named DEATHBOT.

 

Well, although the name seems scary, it is the computer down the hallway in the engineer's room. The Network address confirms that it is someone in this local area network because the IP address begins with 192.168.2.xxx.

Computer -> Manage -> Event Viewer