Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i was looking at the admin audit logs today and found it very usefull. But it doesn't include the source computer launching the commands.

An example, i have the EMC on my computer modifying some distribution list on exchange which is a different machine. In the logs it will say source as being the exchange server and not my computer.

Is there a way to change taht? or have more details?


share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.