Driver Letter Change Tracking

%3CLINGO-SUB%20id%3D%22lingo-sub-339615%22%20slang%3D%22en-US%22%3EDriver%20Letter%20Change%20Tracking%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339615%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Team%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDrive%20letter%20has%20got%20changed%20in%20one%20of%20the%20Server.%20Can%20someone%20help%20with%20the%20query%20to%20find%20the%20log%20that%20should%20say%20who%20did%20the%20change%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-339615%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-352860%22%20slang%3D%22en-US%22%3ERe%3A%20Driver%20Letter%20Change%20Tracking%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-352860%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3EInventory%20and%20Change%20tracking%20service%20does%20not%20track%20every%20change%20that%20could%20happen%20on%20a%20server.%20Particular%20types%20of%20changes%20are%20logged%20by%20default%20like%20services%20states%2C%20software%20installations%2C%20etc.%20There%20is%20option%20for%20custom%20configurations%20in%20case%20you%20want%20to%20track%20registry%20changes%20for%20example.%20In%20case%20you%20haven't%20configured%20some%20specific%20registries%20to%20track%20those%20changes%20I%20do%20not%20think%20you%20will%20find%20that%20information%20in%20the%20service.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hi Team,

 

Drive letter has got changed in one of the Server. Can someone help with the query to find the log that should say who did the change ?

1 Reply

Hi,

Inventory and Change tracking service does not track every change that could happen on a server. Particular types of changes are logged by default like services states, software installations, etc. There is option for custom configurations in case you want to track registry changes for example. In case you haven't configured some specific registries to track those changes I do not think you will find that information in the service.