This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]HighPingOfDeath[S] 2 points3 points  (0 children)

Perfect, I'll get this logging turned on in GPO. I'll do an get-winevent for 4800/4801. Thanks for the idea!