Going thru the log I found this string printing every few minutes… why?
“John Doe was granted full administrator access”
Subject: Why is this appearing in the console log every few minutes?
I would examine the ACL of my domino directory immediately.
Subject: EVERY 10 minutes…precisely
the ACL is fine… I just want to know why at 4am… it’s displaying this…?
… the person concerned is a person authorized to do this… however he says he definately was not logged in at 4am.
Also… at closer look, it is happening EXACTLY every 10 minutes.
Subject: RE: EVERY 10 minutes…precisely
You have said it shows at 4AM and you also said it is every 10 minutes. Is it starting at 4AM and continuing for some period of time, repeating every 10 minutes?
This is a long shot and I’m probably (hopefully) wrong, but it could be a scheduled agent set to run on behalf of this user that kicks off starting at 4AM and runs every 10 minutes.
If you could clarify what is happening maybe someone could narrow down the reason.
Subject: can’t tell when it started…
Charles,I’d love to clarify what is happening… but I really can’t find WHEN it started… it shows up all the way back in the log… even at 1:02:51 AM… and on back to 12:02:49 AM… way before any server tasks start… no telling how long it’s been “running”… I dont know what else to check. The only other piece of info is that he is the only person using DAMO in our organization.
Subject: RE: can’t tell when it started…
Is this guy one of those “Leave the computer on and locked overnight” types who has picked up Full Access Administration in his Admin client, left it open, and then gone home for the evening? Figuring a 10-minute poll interval on the mail file, that may do it.
Just a guess, mind you.
Subject: RE: can’t tell when it started…
I bet this is an agent with the “Allow restricted operations with full administration rights” security option selected. Do a Tell Amgr Sched and see if there’s anything you don’t expect there.
Subject: Why is this appearing in the console log every few minutes?
Because the user just switch to a full Admin mode. It’s informationnal. Look in your NAB(Server-Security tab) to know which group can have the full admin mode
JYR
Subject: at 4 am? Nope. - Also…
AT 4 am??? with the regularity of this… .it LOOKS like an automatic item… ?that’s what I’m wondering about. Could it be part of some other process?
By the way… the person concerned is a person authorized to do this… however he says he definately was not logged in at 4am.
Also… at closer look, it is happening EXACTLY every 10 minutes.