I NEED SOMEONE’S HELP!!!! I have final exam in my MCSE Guide to Microsoft Windows XP Professional–2nd Edition, by James Stewart and Ed Tittel. I am working on my case project which talks about WIN XP Pro accounting department system has been slowly degrading. Administrator adds a 100-Mbps network card, think this will correct problem. He suspects that someone is adding software. Part of my answer is to start the system monitor with counters (though question doesn’t state, assuming he has a baseline to go off of) Now to check about software being added against Local Policies, I was thinking that he used set up an audit through the Event Viewer. I am not on a network at home, so I am just going off what I have read in book. I am thinking to set up some type of security log or application log to see if and who in Accounting Department could be doing this. Are there any certain parameters that need to be set to do this. I hope someone is up and can point me in right direction.
Thanks,
Barb
