What is going on in my security files

[Mel Allen]

I do not have any internet connection to my personal
computer so I thought I would get in touch with someone
that could explain to me what is going on in my event
viewer,security files. I have Micosoft XP software in my
Gateway 700 XL computer,I also have a web camera that I
use as a security device when I am not at home. This
camera has motion detection and will take a picture within
its field of view whenever and motion is seen. The
problem I have is that there are events recorded in the
security files that show up,but nothing is recorded in the
camera software. What I am trying to find out is the
meaning of what is said in these events that have no
corresponding picture.
In XP I go to Control Panel, then Performance and
Maintance, then Administrative tolls, then Event viewer,
then last Security. You see all of the security events
that have happen. When I click onto a event what am I
seeing? The below is one event that had no picture, and
I was not their, but still was recorded in the security
file.

1:53:34 AM category: system event
type: success A
Event: ID 520
user: NT Authority\System
computer: s0027511939
The system time was changed
Process: 752
Process name C:\WINNT\system 32\sychost.exe
primary user name: s0027511939$
Primary domain: Workgroup
Primary Logon ID; (0x0,0x38)
Previous time: 1:53:43AM
New time: 1:53:43AM


Is their anyway you could explain to me what all of the
above means line by line. I would be more than happy to
pay for any help.
Thank you

[Roger Abell [MVP]]

Pictures are not normally associated with events written=20
to the security log. While it is a cool idea, I was not aware=20
that they could be.

The one event that you mention is due to the timesync=20
feature within XP. Apparently it decided to adjust the=20
clock by less than one minute.

The security log can be a little frightening at first. Keep in=20
mind that the info there is more in the form of info that the=20
programmer believed would be useful to them, than in a form=20
designed to be fully meaningful to the usually machine owner.
What you may want to pay attention to are failure messages.
Many of the success messages are just informative, logging=20
that something which should happen did happen.

--=20
Roger=20

"Mel Allen" > wrote in message =
...
> I do not have any internet connection to my personal=20
> computer so I thought I would get in touch with someone=20
> that could explain to me what is going on in my event=20
> viewer,security files. I have Micosoft XP software in my=20
> Gateway 700 XL computer,I also have a web camera that I=20
> use as a security device when I am not at home. This=20
> camera has motion detection and will take a picture within=20
> its field of view whenever and motion is seen. The=20
> problem I have is that there are events recorded in the=20
> security files that show up,but nothing is recorded in the=20
> camera software. What I am trying to find out is the=20
> meaning of what is said in these events that have no=20
> corresponding picture.
> In XP I go to Control Panel, then Performance and=20
> Maintance, then Administrative tolls, then Event viewer,=20
> then last Security. You see all of the security events=20
> that have happen. When I click onto a event what am I=20
> seeing? The below is one event that had no picture, and =20
> I was not their, but still was recorded in the security=20
> file.
>=20
> 1:53:34 AM category: system event
> type: success A
> Event: ID 520
> user: NT Authority\System
> computer: s0027511939
> The system time was changed
> Process: 752
> Process name C:\WINNT\system 32\sychost.exe
> primary user name: s0027511939$
> Primary domain: Workgroup
> Primary Logon ID; (0x0,0x38)
> Previous time: 1:53:43AM
> New time: 1:53:43AM =20
>=20
>=20
> Is their anyway you could explain to me what all of the=20
> above means line by line. I would be more than happy to=20
> pay for any help.
> Thank you