Windows System events: ====================== Event Type: Information Event Source: Service Control Manager Event Category: None Event ID: 7035 Date: 11/30/2007 Time: 7:10:05 AM User: NWSP03\xxxxx Computer: NWSP03 Description: The CiscoWorks Daemon Manager service was successfully sent a start control. Event Type: Information Event Source: Service Control Manager Event Category: None Event ID: 7036 Date: 11/30/2007 Time: 7:10:05 AM User: N/A Computer: NWSP03 Description: The CiscoWorks Daemon Manager service entered the running state. Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7034 Date: 11/30/2007 Time: 7:10:05 AM User: N/A Computer: NWSP03 Description: The CiscoWorks Daemon Manager service terminated unexpectedly. It has done this 11 time(s). Windows Security events: ======================== Event Type: Success Audit Event Source: Security Event Category: Account Logon Event ID: 680 Date: 11/30/2007 Time: 7:10:04 AM User: NWSP03\casuser Computer: NWSP03 Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: casuser Source Workstation: NWSP03 Error Code: 0x0 Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 552 Date: 11/30/2007 Time: 7:10:04 AM User: NT AUTHORITY\SYSTEM Computer: NWSP03 Description: Logon attempt using explicit credentials: Logged on user: User Name: NWSP03$ Domain: WCBBC Logon ID: (0x0,0x3E7) Logon GUID: - User whose credentials were used: Target User Name: casuser Target Domain: NWSP03 Target Logon GUID: - Target Server Name: localhost Target Server Info: localhost Caller Process ID: 5580 Source Network Address: - Source Port: - Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 528 Date: 11/30/2007 Time: 7:10:04 AM User: NWSP03\casuser Computer: NWSP03 Description: Successful Logon: User Name: casuser Domain: NWSP03 Logon ID: (0x0,0x1186C41) Logon Type: 4 Logon Process: Advapi Authentication Package: Negotiate Workstation Name: NWSP03 Logon GUID: - Caller User Name: NWSP03$ Caller Domain: WCBBC Caller Logon ID: (0x0,0x3E7) Caller Process ID: 5580 Transited Services: - Source Network Address: - Source Port: - Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 576 Date: 11/30/2007 Time: 7:10:04 AM User: NWSP03\casuser Computer: NWSP03 Description: Special privileges assigned to new logon: User Name: Domain: Logon ID: (0x0,0x1186C41) Privileges: SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeTakeOwnershipPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeLoadDriverPrivilege SeImpersonatePrivilege SeEnableDelegationPrivilege Event Type: Success Audit Event Source: Security Event Category: Detailed Tracking Event ID: 593 Date: 11/30/2007 Time: 7:10:04 AM User: NT AUTHORITY\SYSTEM Computer: NWSP03 Description: A process has exited: Process ID: 5580 Image File Name: D:\PROGRA~1\CSCOpx\bin\dmgtd.exe User Name: NWSP03$ Domain: WCBBC Logon ID: (0x0,0x3E7) Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 538 Date: 11/30/2007 Time: 7:10:04 AM User: NWSP03\casuser Computer: NWSP03 Description: User Logoff: User Name: casuser Domain: NWSP03 Logon ID: (0x0,0x1186C41) Logon Type: 4 Windows Application events: =========================== Event Type: Information Event Source: CRMDmgtd Event Category: None Event ID: 0 Date: 11/30/2007 Time: 7:10:04 AM User: N/A Computer: NWSP03 Description: CRMDmgtd started. Contents of NMSROOT\lib\classpath\md.properties: ================================================ NMSROOT=d:/PROGRA~1/CSCOpx PX_BINDIR=d:/PROGRA~1/CSCOpx/bin PX_CGIDIR=d:/PROGRA~1/CSCOpx/cgi-bin PX_LOGDIR=d:/PROGRA~1/CSCOpx/log PX_TMPDIR=d:/PROGRA~1/CSCOpx/temp PX_DATADIR=d:/PROGRA~1/CSCOpx/files PX_DOCDIR=d:/PROGRA~1/CSCOpx/htdocs PX_CLASSDIR=d:/PROGRA~1/CSCOpx/www/classpath PX_CGIURL=/cgi-bin PX_DOCURL=/ PX_CLASSURL=/CSCOnm/classpath PX_SCLASSDIR=d:/PROGRA~1/CSCOpx/lib/classpath PX_DATASTORE=DSN=rme PX_CLASSPATH=d:/PROGRA~1/CSCOpx/lib/classpath;d:/PROGRA~1/CSCOpx/www/classpath;d:/PROGRA~1/CSCOpx/campus/www/classpath;d:/PROGRA~1/CSCOpx/campus/lib/classpath;d:/PROGRA~1/CSCOpx/campus/www/classpath;d:/PROGRA~1/CSCOpx/campus/lib/classpath PX_APPDIR=d:/PROGRA~1/CSCOpx/objects PX_CONFDIR=d:/PROGRA~1/CSCOpx/conf PX_CTRBDIR=d:/PROGRA~1/CSCOpx/contrib PX_HLPDIR=d:/PROGRA~1/CSCOpx/help PX_LIBDIR=d:/PROGRA~1/CSCOpx/lib PX_USER=casuser PX_GROUP=casusers PX_STOP_DELAY=3000 PX_SYS_CHECK=1 PX_OSA_PORT=42342 OSAGENT_PORT=42342 PX_HOST=NWSP03 PX_FQDN=NWSP03.wcbbc.wcbmain.com ASANY=d:/PROGRA~1/CSCOpx/objects/db SQLANY=d:/PROGRA~1/CSCOpx/objects/db CORE_SECURE_PORT=443 CORE_NONSECURE_PORT=1741 PX_PROTOCOL=https PX_PORT=443 PX_WEB_PORT=443 MAX_RAM=2048 MAX_SWAP=4096 MAX_CPU=1600 PX_ANI_PORT=42344 SYS_NO_OF_CPUS=4 SYS_RAM=3326 SYS_CPU=2333 SYS_SWAP=4096