pseymour / MakeMeAdmin

Make Me Admin is a simple, open-source application for Windows that allows standard user accounts to be elevated to administrator-level, on a temporary basis.
https://makemeadmin.com/
GNU General Public License v3.0
391 stars 86 forks source link

When do events appear in Event Viewer > Application and Services Logs > Make Me Admin > Operations #84

Open 13RFactor opened 1 year ago

13RFactor commented 1 year ago

I've installed Make Me Admin and it works well. However no events are not appearing in Event Viewer > Application and Services Logs > MakeMeAdmin > Operational. No administrative activities or actions appear in the log. In the MakeMeAdmin log I was hoping to see anytime someone was promoted to admin at least, and hopefully any activities like installing software as an administrator.

I checked my registry keys - all are well. I see that events are appearing in Windows Logs > Security when it queries whether a user is an administrator.

I'm running Windows 10 21H2 on a Dell Optiplex 7490.

Where would I see any activity?

Thanks!

pseymour commented 1 year ago

That Operational log is only used for recording elevated processes. Events such as adding and removing users from the Administrators group are still recorded in the classic Application log.