Logging
Brought to you by:
istvan_hoffmann,
valerypryamikov
Menu
▾
▴
#6 Logging
We have customers with limited access, and many of them (of course) would like admin access to install stuff. But we wish to limit the problems caused by admin access.
This software looks promising. But it would be useful to log date/time and action requested details whenever someone opts to run something with elevated privileges. This way, we wish to audit their machine at a later time, we can see what they needed to use elevated privileges for.
Logged In: YES
user_id=1191465
Originator: NO
Even RAA should use a better logging, the requested info can already be found at "%USERPROFILE%\Application Data\RunAsAdmin\SignalLog\". Every file in that directory logs a run attempt via RAA. The requested-level="unrestricted" entry in the files signs that the file was attempted to start as unrestricted.
Hope it's well enough to solve your problem.
Logged In: YES
user_id=579662
Originator: YES
Ahhh, I somehow missed that.
Thanks, that is what I was looking for!