Hi,
I'm trying to build a custom report that uses the tblntlogevent table and tblComputers to display recent event logs that confirm actions like User Account Creation, User Account Deletion, and User Account Disablement on Domain Controllers. These event logs are Security event log id 624, 630, and 629, respectively. I cannot display these events when I filter on the EventCode column for them, however other codes do work. I think this is because they are not there, and they are not there because they are Success Audits.
Correct me if I'm wrong, but it seems that Lansweeper filters out Success Audits, focusing solely on Failures, Warnings, etc. Is that correct. If so, is there a way to enable it, or filter for particular event ids when running active scanning?
