Exchange Admin Audit Log Event ID 25227
25227: New-OfflineAddressBook Exchange cmdlet issued
This is an event from
Exchange
audit event from
LOGbinder EX
generated by
.
On this page
See also the TechNet article on the cmdlet New-OfflineAddressBook
Free Security Log Resources by Randy
| Field | Description |
|---|
| Occurred | Date and time when Exchange registered the cmdlet. |
| Cmdlet | The cmdlet that was issued. |
| Performed by | The user who issued the cmdlet. |
| Succeeded | "Yes", if succeeded, "No", otherwise. |
| Error | "None", if the cmdlet resulted in no error, the error message otherwise. |
| Originating server | The host name of the server. |
| Object modified | The object that was modified by the cmdlet. |
| Parameters | The list of parameters, listing them by the parameter's Name and Value. |
| Modified properties | Modified properties, if any (otherwise "n/a"). |
| Additional information | Additional information, if any (otherwise "n/a"). |
Supercharger Free Edition
Centrally manage WEC subscriptions.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
New-OfflineAddressBook Exchange cmdlet issued
Occurred: 12/23/2012 3:23:43 PM
Cmdlet: New-OfflineAddressBook
Performed by: sp2010.com/Users/Joe Taylor
Succeeded: Yes
Error: None
Originating server: SP2010-EX1 (14.02.0328.009)
Object modified: \Test_OAB
Parameters
Name: Name, Value: [Test_OAB]
Name: AddressLists, Value: [\Default Global Address List]
Modified Properties
Name: PublicFolderDistributionEnabled, Old Value: [True], New Value: [False]
Name: RawName, Old Value: [], New Value: [Test_OAB]
Name: ANRProperties, Old Value: [], New Value: [805371935;-1936588769;973078559;974192671;-1936785377;973471775;-1936850913;-2146496481;974716959]
Name: AddressLists, Old Value: [], New Value: [\Default Global Address List]
Name: DetailsProperties, Old Value: [], New Value: [956301315;268304387;977272843;973602847;973733919;975765535;975634463;975699999;975831071;975568927;974585887;974520351;-1936654305;976224287;974651423;-1936719841;-2146369505;973668383;974852127;976162847;975372319;974913567;976093215;975241247;805568543;975307010;980422914;-1939205886;-2147090402;973013022;956628995;-1935671293;-1931673589;-1939013374;-1934880737;-2140536829;-1934295029;-1931345917;-1931280381]
Name: OrganizationId, Old Value: [], New Value: []
Name: Id, Old Value: [], New Value: [\Test_OAB]
Name: OfflineAddressBookFolder, Old Value: [0], New Value: [0]
Name: Versions, Old Value: [Version2;Version3;Version4], New Value: [Version4]
Name: SiteFolderGuid, Old Value: [83;215;255;222;104;56;54;77;174;132;249;185;183;146;210;133], New Value: [212;141;115;238;229;89;215;73;182;74;24;20;246;6;94;155]
Name: OabFlags, Old Value: [1], New Value: [0]
Name: ExchangeLegacyDN, Old Value: [], New Value: [/o=First Organization/cn=addrlists/cn=oabs/cn=Test_OAB]
Name: GlobalWebDistributionEnabled, Old Value: [True], New Value: [False]
Name: RawVersion, Old Value: [0], New Value: [6]
Name: TruncatedProperties, Old Value: [], New Value: [-1935802110;-1933442814;-1932001267;-1931935731;-1931870195;-1931804659]
Additional information: CmdletParameters/Parameter/Name= [Name]; CmdletParameters/Parameter/Value= [Test_OAB]; CmdletParameters/Parameter/Name= [AddressLists]; CmdletParameters/Parameter/Value= [\Default Global Address List]; ModifiedProperties/Property/Name= [PublicFolderDistributionEnabled]; ModifiedProperties/Property/OldValue= [True]; ModifiedProperties/Property/NewValue= [False]; ModifiedProperties/Property/Name= [RawName]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [Test_OAB]; ModifiedProperties/Property/Name= [ANRProperties]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [805371935;-1936588769;973078559;974192671;-1936785377;973471775;-1936850913;-2146496481;974716959]; ModifiedProperties/Property/Name= [AddressLists]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [\Default Global Address List]; ModifiedProperties/Property/Name= [DetailsProperties]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [956301315;268304387;977272843;973602847;973733919;975765535;975634463;975699999;975831071;975568927;974585887;974520351;-1936654305;976224287;974651423;-1936719841;-2146369505;973668383;974852127;976162847;975372319;974913567;976093215;975241247;805568543;975307010;980422914;-1939205886;-2147090402;973013022;956628995;-1935671293;-1931673589;-1939013374;-1934880737;-2140536829;-1934295029;-1931345917;-1931280381]; ModifiedProperties/Property/Name= [OrganizationId]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [Id]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [\Test_OAB]; ModifiedProperties/Property/Name= [OfflineAddressBookFolder]; ModifiedProperties/Property/OldValue= [0]; ModifiedProperties/Property/NewValue= [0]; ModifiedProperties/Property/Name= [Versions]; ModifiedProperties/Property/OldValue= [Version2;Version3;Version4]; ModifiedProperties/Property/NewValue= [Version4]; ModifiedProperties/Property/Name= [SiteFolderGuid]; ModifiedProperties/Property/OldValue= [83;215;255;222;104;56;54;77;174;132;249;185;183;146;210;133]; ModifiedProperties/Property/NewValue= [212;141;115;238;229;89;215;73;182;74;24;20;246;6;94;155]; ModifiedProperties/Property/Name= [OabFlags]; ModifiedProperties/Property/OldValue= [1]; ModifiedProperties/Property/NewValue= [0]; ModifiedProperties/Property/Name= [ExchangeLegacyDN]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [/o=First Organization/cn=addrlists/cn=oabs/cn=Test_OAB]; ModifiedProperties/Property/Name= [GlobalWebDistributionEnabled]; ModifiedProperties/Property/OldValue= [True]; ModifiedProperties/Property/NewValue= [False]; ModifiedProperties/Property/Name= [RawVersion]; ModifiedProperties/Property/OldValue= [0]; ModifiedProperties/Property/NewValue= [6]; ModifiedProperties/Property/Name= [TruncatedProperties]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [-1935802110;-1933442814;-1932001267;-1931935731;-1931870195;-1931804659]
For more information, see http://logbinder.com/support
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection