Is anybody able to provide me with a list and associated definition the numerous Event IDs that are available in Windows 2003?
As a starting point I am after the Event IDs/audit logs that get added to the Event Viewer when:
1. A user logs on
2. A user logs off
3. A user copies files to a certain folder on the server
4. A user deletes files from the server
but others would be useful as well.
Also, does anybody know of a third party tool that provides reporting capabilities for Event Viewer. For example, if I wanted to create a report that displayed a list of the event ID that is logged whenever someone gains access to the server (via the audit log or security log)? I understand that I can use the filter function in Event Viewer but I am after a more "user friendly" interface.