Does anyone know a way I can audit SGMCMDIntn.exe -WOLstart and SGMCMDIntn.exe -WOLstop ? Does it flag something in the registry?
This thread was automatically locked due to age.
Hi nduda78,
you could specify an auditing policy for the machine and activate the following events:
Category | ID | Description
-----------------------------------------------------------------------------------
Authentication | 2005 |Wake on LAN activated
Authentication | 2006 | Wake on LAN deactivated
Authentication | 2095 | Wake on LAN could not be activated
Authentication | 2096 | Wake on LAN could not be deactivated
When configuring the policy you can also choose if you want to log the events into the Safeguard Database and / or into the Clients Eventlog.
Regards,
Chris