HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 81
Explanation:
Windows Sign In was disabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user> - Authenticated user who disabled Windows Sign In. If an unauthenticated user disabled
Windows Sign In, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to disable
Windows Sign In.
Message:
<device type>: Windows Sign In configuration modified; time="<timestamp>"
action=trusted_domain_added value="<value>" user="<user>" source_IP="<client computer IP
address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
A trusted domain for Windows Sign In was added.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - Trusted domain that was added.
<user> - Authenticated user who added the trusted domain configuration. If an unauthenticated
user added the trusted domain, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to add the
trusted domain.
Message:
<device type>: Windows Sign In configuration modified; time="<timestamp>"
action=trusted_domain_deleted value="<value>" user="<user>" source_IP="<client computer IP
address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
A trusted domain for Windows Sign In was deleted.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - Trusted domain that was deleted.
<user> - Authenticated user who deleted the trusted domain. If an unauthenticated user modified
deleted the trusted domain, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to delete
the trusted domain.
Message:
<device type>: Windows Sign In configuration modified; time="<timestamp>"
item=default_windows_domain value="<value>" old_value="<old value>" user="<user>"
source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The default Windows domain setting for Windows Sign In was modified.
Variables:
<device type> - see Table 2-2.