Using event viewer to record hostname changes

Our Windows 2000 SP4 server had an unexpected name change this morning and we want to be able to check/enable logging of any hostname changes so they appear in Event Viewer. Is there any way to do this?
MaleboligiaAsked:
Who is Participating?
 
grayeConnect With a Mentor Commented:
Oddly enough, the event viewer already records that kind of data....

The "Computer" field in any one of the Event Viewer logs shows the name of the computer at the time that record was made.   So detect when a computer's name got changed, just look at this field for the old vs. new name.   We use this behavior to determine when a PC got installed into the network (vs when it got loaded and then later Ghosted to the client PC).

Did you need more?



0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.