event tracing

---

Event Log Rights for Non-Administrators 11

This entry was posted in Windows OS and tagged event log event tracing SDDL on 21st January 2016 by Dimitri

Granting event log rights to non-administrators wsa challenging in Windows 2003, becomes easier in Windows 2008 (R2). However fine-tuned access still requires playing with Security Descriptors reading and writing. Event Log Rights Case #1: Read Access only For Windows 2008, If you just want to grant regular read access, the […]

---

Enabling ETW tracing for NTLM issues 2

This entry was posted in Windows OS and tagged Active Directory ETW event tracing NTLM troubleshooting on 10th March 2015 by Dimitri

ETW (Event Tracing for WIndows) is said to be powerful by Microsoft, but the setup of the various providers can be tedious because the documentation often lacks examples for the specific provider you desesperately need. Here is a script to start recording NTLM authentication traces on a Domain Controller, in […]

---

---