Invisible wrote:
> There are a few things that Windows won't let you do, that I wish it 
> would let you do. For example:
> 
> - Allow Administrators to pretend to be another user, without having to 
> know that user's password.
> 
> There are times when, in order to configure something, you have to log 
> in under the user's account before you can configure it. It would be 
> *so* much easier for everyone if the user didn't have to hang around so 
> they can enter their password for you 18 times while you try to get 
> their PC working. Of course, you can reset their password yourself - but 
> then you can't set it back to what it was (due to password recycling 
> restrictions).
> 
> - Allow Administrators to unlock a workstation without destroying all of 
> the user's unsaved work. (IOW, without terminating all the stuff they 
> have running.)
> 
> - Log security events in a meaningful way.
> 
> Do you know what
> 
>   Object Access Attempt:
>   Object Server:Security
>   Handle ID:144
>   Object Type:File
>   Process ID:3156
>   Image File Name:C:\WINDOWS\system32\notepad.exe
>   Accesses:WriteData
>   Access Mask:0x6
> 
> means? I certainly don't.
> 
> But then, this isn't human-readable data. This is simply a raw dump of 
> the low-level internal data structures that Windows itself uses to 
> manage object access. Something human-readable would be far more useful. 
> As it is, all over the company we have event logs full of gibberish like 
> this that nobody can understand. We might as well not bother logging it...

Looks like someone was trying to overwrite notepad. I'd be suspicious. 
Most people don't overwrite notepad. Wonder what process 3156 was..

> - The ability to monitor CPU, HD and NIC activity from the notification 
> area would be useful. (It's useful for determining whether the computer 
> is actually "doing anything", and if it is, what it's waiting around 
> for.) Actually, I'm still hoping that one day somebody will design a 
> case with the NIC activity light on the front rather than the back. And 
> seperate indicator lights for each HD...

I think sysinternals has a utility like this..

http://technet.microsoft.com/en-us/sysinternals/bb896646.aspx

Just open task manager for a CPU monitor. NIC, I dunno.



-- 
~Mike

Post a reply to this message