RE: log level settings

["John Hammond" <josephhammond () hotmail com>]

I use knowledgebase more than anything a couple of examples are as follows:

http://support.microsoft.com/kb/282791/en-us
http://support.microsoft.com/kb/314980/en-us
http://support.microsoft.com/kb/300549/en-us
http://support.microsoft.com/kb/262177/en-us
http://support.microsoft.com/kb/310399/en-us
http://msdn2.microsoft.com/en-us/library/aa392285.aspx

another site is

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_20856449.html

http://www.windowsnetworking.com/kbase/WindowsTips/Windows2000/RegistryTips/Miscellaneous/Registryhackstoturn-onverboseGPOlogging.html


> From: r a <pan_pan69 () yahoo com>
> To: security-basics () securityfocus com
> Subject: log level settings
> Date: Fri, 21 Sep 2007 16:31:19 -0700 (PDT)
> MIME-Version: 1.0
> Received: from outgoing.securityfocus.com ([205.206.231.26]) by 
> bay0-mc4-f14.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Fri, 
> 21 Sep 2007 18:36:22 -0700
> Received: from outgoing.securityfocus.com by outgoing.securityfocus.com     
>      via smtpd (for mx3.hotmail.com [65.54.244.72]) with ESMTP; Fri, 21 
> Sep 2007 18:29:11 -0700
> Received: from lists.securityfocus.com (lists.securityfocus.com 
> [205.206.231.19])by outgoing2.securityfocus.com (Postfix) with QMQPid 
> 07E4A144119; Fri, 21 Sep 2007 18:44:41 -0600 (MDT)
> Received: (qmail 15209 invoked from network); 22 Sep 2007 00:06:40 -0000
> X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
> X-Message-Info: 
> JGTYoYF78jESuoGDgagw/Akn8WwX9PXMrEre+LSGjZp0Gk1kvuza2/Ji3OUFKn8UTXK5eZtNxMv6tWKo4NWYSQ==
> Mailing-List: contact security-basics-help () securityfocus com; run by ezmlm
> Precedence: bulk
> List-Id: <security-basics.list-id.securityfocus.com>
> List-Post: <mailto:security-basics () securityfocus com>
> List-Help: <mailto:security-basics-help () securityfocus com>
> List-Unsubscribe: <mailto:security-basics-unsubscribe () securityfocus com>
> List-Subscribe: <mailto:security-basics-subscribe () securityfocus com>
> Resent-Sender: listbounce () securityfocus com
> Errors-To: listbounce () securityfocus com
> Delivered-To: mailing list security-basics () securityfocus com
> Delivered-To: moderator for security-basics () securityfocus com
> DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;  s=s1024; d=yahoo.com;  
> h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; 
>  
> b=0F1nLnnXy7D0H/SfGAdpY4RM1pyg83MczesnDL8bldLizPnQAbRrRIu2xq3ks8PdRWL3XaAr/73NIs8Hrq9CuH3axEtkBPs38k/tUI0bRmk1Xrw6NF95SUpLh5LTtJ6tqh+AB5Qeyz7Dv0qcZy5V8vkfx7XofaSg2CO0o20gvEw=;
> X-YMail-OSG: 
> Vvwi8rwVM1lbZiJfWBV_mtOHqu3qW9wbtwEBHPQwvfLA2GLaOMfMAamXAbq.SVPYBVBAQdvnGDSNOhb4p1jJhb1F2H_88qTYo.TjNpO0PxAe5j3ByuLk2R_xBnWa9AxmB4FhaSjXF76fvs6xSzcHib8iIA--
> Resent-Message-Id: <20070922004441.07E4A144119 () outgoing2 securityfocus com>
> Resent-Date: Fri, 21 Sep 2007 18:44:41 -0600 (MDT)
> Resent-From: security-basics-return-45867 () securityfocus com
> Return-Path: 
> security-basics-return-45867-josephhammond=hotmail.com () securityfocus com
> X-OriginalArrivalTime: 22 Sep 2007 01:36:22.0716 (UTC) 
> FILETIME=[FB826FC0:01C7FCB8]
>
> Does anyone know a good reference for configuring log
> settings on servers in regard to what should be on and
> what is most often unneeded? This would be for a mixed
> environment (UNIX, Windows other)
>
> I am looking for a web site or other reference that
> might show a starting point to go on to start with.
>
> For example what is a good template for a Windows
> domain controller?
>
> Google hasn't been much help for me...
>
> T I A,
>
> r
>
>
>
>       
> ____________________________________________________________________________________
> Check out the hottest 2008 models today at Yahoo! Autos.
> http://autos.yahoo.com/new_cars.html