How to find who run a TM1 DB Service?

[kkmk]

Hi,

We have two TM1 Server running on the server. Few weeks back i have disabled one of the services which was not required for some time. But yesterday it was enabled. How to check / Where to check who made the service enable.?

We are using Windows 2008 R2. Cognos TM1 10.1.1 version. Thanks in advance.

Thanks
kkmk

[kkmk]

Or I want to check who logged in windows server for a particular periods. I have checked in Even Viewer-> Application and Security. I don't find any User information related log entries in these two. Please help.

Thanks
kkmk

[jim wood]

Event viewer will only show you this detail as it has nothing to do with TM1 itself. If your logging level isn't set to register the detail you need then I'm afraid you might be out of luck.

[Gregor Koch]

Is the TM1 service set to start 'automatic' and the machine was restarted?
I don't know how many people can log on to your server machine but usually this a relatively small group of which I would expect they know what they are doing. That includes letting other people know when they randomly start a service.
Cheers

[rmackenzie]

As Jim rightly mentions, this isn't really a TM1-related issue. You can find more information in the links below though as the Windows behaviour did change between Windows Server 2003 and 2008:
Service Control Manager - auditing start/stop events
advanced audit policy dabbling and regretting

After wading through all that, I reckon it's easy to see that conditional feeders are much preferred