Windows 2000 安全性事件說明 (步驟 2 之 2)

文章翻譯 文章翻譯
文章編號: 301677 - 檢視此文章適用的產品。
注意事項
這份文件適用於 Windows 2000。Windows 2000 支援的結束 2010 7 月 13,Windows 2000 End-of-Support Solution Center 是規劃您的遷移策略,從 Windows 2000 的起點。如需詳細資訊請參閱 Microsoft Support Lifecycle Policy]。
全部展開 | 全部摺疊

結論

本文包含各種安全性相關,且相關的稽核事件以及如何解譯這些事件的相關資訊的說明。這些事件所有會出現在安全性事件記錄檔,並且將會記錄與來源的安全性。下列的發行項 「 Microsoft 知識庫 」 中是 2 的第 1 部份:
299475Windows 2000 安全性事件說明 (步驟 1 之 2)

其他相關資訊

   Event ID: 608 (0x0260)
       Type: Success Audit
Description: User Right Assigned
             User Right: %1             Assigned To: %2
Assigned By  User Name: %3              Domain: %4
             Logon ID: %5
				
   Event ID: 609 (0x0261)
       Type: Success Audit
Description: User Right Removed
             User Right: %1             Removed From: %2
Removed By:  User Name: %3              Domain: %4
             Logon ID: %5
				
   Event ID: 610 (0x0262)
       Type: Success Audit
Description: New Trusted Domain         
             Domain Name: %1            Domain ID: %2
Established By:  
             User Name: %3              Domain: %4
             Logon ID: %5
				
   Event ID: 611 (0x0263)
       Type: Success Audit
Description: Removing Trusted Domain
             Domain Name: %1            Domain ID: %2
Removed By:  User Name: %3              Domain: %4
             Logon ID: %5
				
   Event ID: 612 (0x0264)
       Type: Success Audit
Description: Audit Policy Change
             New Policy:
             Success   Failure
               %1         %2    System
               %3         %4    Logon/Logoff
               %5         %6    Object Access
               %7         %8    Privilege Use
               %9        %10    Detailed Tracking
              %11        %12    Policy Change
              %13        %14    Account Management
             Changed By:
             User Name: %15             Domain Name: %16
             Logon ID: %17
				
   Event ID: 613 (0x0265)
       Type: Success Audit
Description: IPSec policy agent started  
             Ipsec Policy Agent: %1     Policy Source:  %2
             Event Data: %3
				
   Event ID: 614 (0x0266)
       Type: Success Audit
Description: IPSec policy agent disabled
             Ipsec Policy Agent: %1     Event Data:  %2
				
   Event ID: 615 (0x0267)
       Type: Success Audit
Description: IPSEC PolicyAgent Service:  %1
             Event Data: %1
				
   Event ID: 616 (0x0268)
       Type: Failure Audit
Description: IPSec policy agent encountered a potentially serious failure.
             Event Data: %1
				
   Event ID: 617 (0x0269)
       Type: Success Audit
Description: Kerberos Policy Changed
Changed By:  User Name: %1              Domain Name: %2
             Logon ID: %3               
Changes made: %4
'-'  means no changes, otherwise each change is shown as:
Parameter Name: (new value) (old value)
				
   Event ID: 618 (0x026a)
       Type: Success Audit
Description: Encrypted Data Recovery Policy Changed
Changed By:  User Name: %1              Domain Name: %2
             Logon ID: %3               
Changes made: %4
'-'  means no changes, otherwise each change is shown as:
Parameter Name: new value (old value)
				
   Event ID: 619 (0x026b)
       Type: Success Audit
Description: Quality of Service Policy Changed
Changed By:  User Name: %1              Domain Name: %2
             Logon ID: %3               
Changes made: %4
'-'  means no changes, otherwise each change is shown as:
Parameter Name: new value (old value)
				
   Event ID: 620 (0x026C)
Description: Trusted Domain Information Modified:
             Domain Name: %1            Domain ID: %2
Modified By: User Name: %3              Domain: %4
             Logon ID: %5
				
   Event ID: 624 (0x0270)
       Type: Success Audit
Description: User Account Created
             New Account Name: %1       New Domain: %2
             New Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges %7
				
   Event ID: 625 (0x0271)
Description: User Account Type Change
       Type: Success Audit
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             New Type: %4               Caller User Name: %5
             Caller Domain: %6          Caller Logon ID: %7
				
   Event ID: 626 (0x0272)
Description: User Account Enabled
       Type: Success Audit
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6
				Note Windows 2000 does not log event ID 626 explicitly. Results are logged as a part of event ID 642 in the description of the message. 
   Event ID: 627 (0x0273)
       Type: Success Audit
Description: Change Password Attempt
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 628 (0x0274)
       Type: Success Audit
Description: User Account password set
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6
				
   Event ID: 630 (0x0276)
       Type: Success Audit
Description: User Account Deleted:
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 631 (0x0277)
       Type: Success Audit
Description: Security Enabled Global Group Created
             New Account Name: %1       New Domain: %2
             New Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 632 (0x0278)
       Type: Success Audit
Description: Security Enabled Global Group Member Added
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 633 (0x0279)
       Type: Success Audit
Description: Security Enabled Global Group Member Removed
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 634 (0x027A)
       Type: Success Audit
Description: Security Enabled Global Group Deleted
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 635 (0x027B)
       Type: Success Audit
Description: Security Enabled Local Group Created
             New Account Name: %1       New Domain: %2
             New Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 636 (0x027C)
       Type: Success Audit

Description: Security Enabled Local Group Member Added
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 637 (0x027D)
       Type: Success Audit
Description: Security Enabled Local Group Member Removed
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 638 (0x027E)
       Type: Success Audit
Description: Security Enabled Local Group Deleted
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 639 (0x027F)
       Type: Success Audit
Description: Security Enabled Local Group Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 640 (0x0280)
       Type: Success Audit
Description: General Account Database Change
             Type of change: %1         Object Type: %2
             Object Name: %3            Object ID: %4
             Caller User Name: %5       Caller Domain: %6
             Caller Logon ID: %7
				
   Event ID: 641 (0x0281)
       Type: Success Audit
Description: Security Enabled Global Group Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 642 (0x0282)
       Type: Success Audit
Description: User Account Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 643 (0x0283)
       Type: Success Audit
Description: Domain Policy Changed: %1 modified
             Domain: %2                 Domain ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 644 (0x0284)
       Type: Success Audit
Description: User Account Locked Out
             Target Account Name: %1    Target Account ID: %3
             Caller Machine Name: %2
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6
				
   Event ID: 645 (0x0285)
       Type: Success Audit
Description: Computer Account Created
             New Account Name: %1       New Domain: %2
             New Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges %7
				
   Event ID: 646 (0x0286)
       Type: Success Audit
Description: Computer Account Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %5       Caller Domain: %6
             Caller Logon ID: %7        Privileges: %8
				
   Event ID: 647 (0x0287)
       Type: Success Audit
Description: Computer Account Deleted
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 648 (0x0288)
       Type: Success Audit
Description: Security Disabled Local Group Created
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5

             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 649 (0x0289)
       Type: Success Audit
Description: Security Disabled Local Group Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 650 (0x028A)
       Type: Success Audit
Description: Security Disabled Local Group Member Added
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 651 (0x028B)
       Type: Success Audit
Description: Security Disabled Local Group Member Removed
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 652 (0x028C)
       Type: Success Audit
Description: Security Disabled Local Group Deleted
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 653 (0x028D)
       Type: Success Audit
Description: Security Disabled Global Group Created
             New Account Name: %1       New Domain: %2
             New Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 654 (0x028E)
       Type: Success Audit
Description: Security Disabled Global Group Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 655 (0x028F)
       Type: Success Audit
Description: Security Disabled Global Group Member Added
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 656 (0x0290)
       Type: Success Audit
Description: Security Disabled Global Group Member Removed
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 657 (0x0291)
       Type: Success Audit
Description: Security Disabled Global Group Deleted
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 658 (0x0292)
       Type: Success Audit
Description: Security Enabled Universal Group Created
             New Account Name: %1       New Domain: %2
             New Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 659 (0x0293)
       Type: Success Audit
Description: Security Enabled Universal Group Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 660 (0x0294)
       Type: Success Audit
Description: Security Enabled Universal Group Member Added
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 661 (0x0295)
       Type: Success Audit
Description: Security Enabled Universal Group Member Removed
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 662 (0x0296)
       Type: Success Audit
Description: Security Enabled Universal Group Deleted
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 663 (0x0297)
       Type: Success Audit
Description: Security Disabled Universal Group Created
             New Account Name: %1       New Domain: %2
             New Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 664 (0x0298)
       Type: Success Audit
Description: Security Disabled Universal Group Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 665 (0x0299)
       Type: Success Audit
Description: Security Disabled Universal Group Member Added
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 666 (0x029A)
       Type: Success Audit
Description: Security Disabled Universal Group Member Removed
             Member Name: %1            Member ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 667 (0x029B)
       Type: Success Audit
Description: Security Disabled Universal Group Deleted
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %4       Caller Domain: %5
             Caller Logon ID: %6        Privileges: %7
				
   Event ID: 668 (0x029C)
       Type: Success Audit
Description: Group Type Changed
             Target Account Name: %1    Target Domain: %2
             Target Account ID: %3
             Caller User Name: %5       Caller Domain: %6
             Caller Logon ID: %7        Privileges: %8
				
   Event ID: 669 (0x029D)
       Type: Success Audit
Description: Add SID History
             Source Account Name: %1    Source Account ID: %2
             Target Account Name: %3    Target Domain: %4
             Target Account ID: %5
             Caller User Name: %6       Caller Domain: %7
             Caller Logon ID: %8        Privileges: %9
				
   Event ID: 670 (0x029E)
       Type: Success Audit
Description: Add SID History
             Source Account Name: %1    Target Account Name: %2
             Target Domain: %3          Target Account ID: %4
             Caller User Name: %5       Caller Domain: %6
             Caller Logon ID: %7        Privileges: %8
				
   Event ID: 672 (0x02a0)
       Type: Success Audit
Description: Authentication Ticket Granted
             User Name: %1              Supplied Realm Name: %2
             User ID: %3                Service Name: %4
             Service ID: %5             Ticket Options: %6
             Ticket Encryption Type: %7 Pre-Authentication Type: %8
             Client Address: %9
				
   Event ID: 673 (0x02a1)
       Type: Success Audit
Description: Service Ticket Granted
             User Name: %1              User Domain: %2
             Service Name: %3           Service ID: %4
             Ticket Options: %5         Ticket Encryption Type: %6
             Client Address: %7
				
   Event ID: 674 (0x02a2)
       Type: Success Audit
Description: Ticket Granted Renewed
             User Name: %1              User Domain: %2
             Service Name: %3           Service ID: %4
             Ticket Options: %5         Ticket Encryption Type: %6
             Client Address: %7
				
   Event ID: 675 (0x02a3)
       Type: Failure Audit
Description: Pre-authentication failed
             User Name: %1              User ID: %2
             Service Name: %3           Pre-Authentication Type: %4
             Failure Code: %5           Client Address: %6
				
   Event ID: 676 (0x02a4)
       Type: Failure Audit
Description: Authentication Ticket Request Failed
             User Name: %1              Supplied Realm Name: %2
             Service Name: %3           Ticket Options: %4
             Failure Code: %5           Client Address: %6
				
   Event ID: 677 (0x02a5)
       Type: Failure Audit
Description: Service Ticket Request Failed:
Description: Authentication Ticket Request Failed
             User Name: %1              Supplied Realm Name: %2
             Service Name: %3           Ticket Options: %4
             Failure Code: %5           Client Address: %6
				
   Event ID: 678 (0x02a6)
       Type: Success Audit
Description: Account Mapped for Logon by: %1
             Client Name: %2            Mapped Name:%3
				
   Event ID: 679 (0x02a7)
       Type: Failure Audit
Description: The name: %2 could not be mapped for logon by: %1
				
   Event ID: 680 (0x02a8)
       Type: Success Audit
Description: Account Used for Logon by: %1
             Account Name: %2           Workstation: %3
				
   Event ID: 681 (0x02a9)
       Type: Failure Audit
Description: The logon to account: %2 by: %1 from workstation: %3 failed. The error code was: %4
				
   Event ID: 682 (0x02aa)
       Type: Success Audit
Description: Session reconnected to winstation:
             User Name: %1              Domain: %2
             Logon ID: %3               Session Name: %4
             Client Name: %5            Client Address: %6
				
   Event ID: 683 (0x02ab)
       Type: Success Audit
Description: Session disconnected from winstation:
             User Name: %1              Domain: %2
             Logon ID: %3               Session Name: %4
             Client Name: %5            Client Address: %6
				

屬性

文章編號: 301677 - 上次校閱: 2007年1月31日 - 版次: 3.4
這篇文章中的資訊適用於:
  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Server SP2
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Advanced Server SP2
  • Microsoft Windows 2000 Professional SP1
  • Microsoft Windows 2000 Professional SP2
  • Microsoft Windows 2000 Datacenter Server SP2
關鍵字:?
kbmt kbinfo KB301677 KbMtzh
機器翻譯
重要:本文是以 Microsoft 機器翻譯軟體翻譯而成,而非使用人工翻譯而成。Microsoft 同時提供使用者人工翻譯及機器翻譯兩個版本的文章,讓使用者可以依其使用語言使用知識庫中的所有文章。但是,機器翻譯的文章可能不盡完美。這些文章中也可能出現拼字、語意或文法上的錯誤,就像外國人在使用本國語言時可能發生的錯誤。Microsoft 不為內容的翻譯錯誤或客戶對該內容的使用所產生的任何錯誤或損害負責。Microsoft也同時將不斷地就機器翻譯軟體進行更新。
按一下這裡查看此文章的英文版本:301677
Microsoft及(或)其供應商不就任何在本伺服器上發表的文字資料及其相關圖表資訊的恰當性作任何承諾。所有文字資料及其相關圖表均以「現狀」供應,不負任何擔保責任。Microsoft及(或)其供應商謹此聲明,不負任何對與此資訊有關之擔保責任,包括關於適售性、適用於某一特定用途、權利或不侵權的明示或默示擔保責任。Microsoft及(或)其供應商無論如何不對因或與使用本伺服器上資訊或與資訊的實行有關而引起的契約、過失或其他侵權行為之訴訟中的特別的、間接的、衍生性的損害或任何因使用而喪失所導致的之損害、資料或利潤負任何責任。

提供意見

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com