Endpoint Protection

 View Only
  • 1.  SEPM 11 - need logging for admin-activities

    Posted Oct 12, 2009 08:45 AM
    Hi,
    unfortunately we share the access to the SEP-Manager with other departments, so we need a log with "..who did something on the clients (in particular moving from one group to another)..". I found this log, but it isn't useable for me, because there was no clientname inside (the name of the PC) and also I did not found from/to groups, only "... the user did a move..."

    Does anyone know, what I did wrong or where I'm able to "enabling" this?

    thx JFX


  • 2.  RE: SEPM 11 - need logging for admin-activities
    Best Answer

    Posted Oct 12, 2009 12:55 PM
    Hi,

    Please check the settings below and let us know if that asnwers your questions.

    Monitors->Logs-> Log Type=System, Log Content=Administrative
    Click on advanced. Event Type= User Event

    Log Type=Audit. Click on Advanced. Click on the drop down menu Event Type. Now you will be able to see all the types of logs you want to see with respect to the policies.

    Best,
    Aniket




  • 3.  RE: SEPM 11 - need logging for admin-activities

    Posted Oct 13, 2009 10:39 AM
    Hi Aniket,

    yes, I found the logs with type "information" and (as example) description "user moved". What I missed is: which user is moved from and to. My detail-information shows only that a user was moved, when and who did the moving and not old/new policy.

    tnx jfx


  • 4.  RE: SEPM 11 - need logging for admin-activities

    Posted Oct 14, 2009 02:21 PM
    HI,

    I think thats all the info you can get from the settings I had provided. I would suggest you to create an Idea for the same. So that we can make it available for review and accept openions of other users as well about this.

    Best,
    Aniket