who Taskkill me?

Message

mropreonzo · #1 Post by **mropreonzo** » 30 Jan 2014 08:16

Hello,

there is a possibility to find who is killing remotely (using taskkill) my running programs (businness environment)?

thank you

#2 Post by **foxidrive** » 30 Jan 2014 08:26

Are you in an educational environment, or buisiness, or home LAN?

mropreonzo · #3 Post by **mropreonzo** » 30 Jan 2014 08:30

businness...

#4 Post by **foxidrive** » 30 Jan 2014 09:32

It may be a script that is designed to stop some software running, or your IT/Admin.

There are no flags to say who killed a process.

#5 Post by **Squashman** » 30 Jan 2014 10:09

I would look in event viewer to see if it shows up or not. If not you may need to turn on one of these audit policies.
http://technet.microsoft.com/en-us/library/cc766468(v=ws.10).aspx.

DosTips.com