Event Details
User Activity->Object Access->Active Directory Object Access->Active Roles 7 or higher->EventID 1518 - Attribute set.
EventID 1518 - Attribute set.
 Sample:
Attribute set.
Operation GUID: %1
Attribute name: %2
Attribute value: %3
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: ARAdminService
Filtering Field Equals to Value
Source ARAdminSvc
EventId 1518
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. - 1/1/2000
Who Account or user name under which the activity occured. - SomeUser
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Attribute Set" Attribute Set
Where The name of the workstation/server where the activity was logged. - 10.10.10.10
Where From The name of the workstation/server where the activity was initiated from. - 10.10.10.10
Severity Specify the seriousness of the event. - High
WhoDomain -
WhereDomain -
Result Successful or Failed -
Object Name -
Object Type -
Whom -
Comments
You must be logged in to comment