Event Details
Operating System->Microsoft Windows->Application logs->Quest->Change Auditor->Change Auditor for SharePoint->EventID 52 - All permission levels revoked
EventID 52 - All permission levels revoked
All permission levels revoked
 Sample:

                                
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: ChangeAuditor for SharePoint
Filtering Field Equals to Value
EventId 52
Field Matching
FieldDescriptionStored inSample Value
DateTime Date/Time of event origination in GMT format. DateTime 10.10.2000 19:00:00
Source Name of an Application or System Service originating the event. Source ChangeAuditor for SharePoint
Type Warning, Information, Error, Success, Failure, etc. Type Success
User Domain\Account name of user/service/computer initiating event. User RESEARCH\Alebovsky
Computer Name of server workstation where event was logged. Computer DC1
EventID Numerical ID of event. Unique within one Event Source. EventId 52
Description The entire unparsed event message. Description All permission levels revoked
Log Name The name of the event log (e.g. Application, Security, System, etc.) LogName ChangeAuditor for SharePoint
User logon name Sharepoint user logon name InsertionString46 YDOM\ii
List relative URL List relative URL InsertionString2 \Lists\Sublist
Grantee user name Grantee user name InsertionString20 YDOM\gl
Grantee group name Grantee group name InsertionString10 The group
Site URL Site URL InsertionString49 http://yj:26939
Comments
You must be logged in to comment