PCI Compliace - Audit Logs

Posted by Casey Hanson - on November 17, 2009, 8:34 pm

Please log in for more thread options

The PCI Compliance requires the POS application to audit certain functions
like changing cashier passwords, etc.. It looks like this functionality was
built into the recent versions to meet compliancy. Is there any documentation
that can help us decipher the events that are inserted into the RMS database
AuditLog table? In particular - cashier created/deleted, login failed,
password changes, any other POS activity around security.

Posted by Jeff @ Check Point Software on November 18, 2009, 4:08 pm

Please log in for more thread options

: quoted-printable

Casey,

Not sure why you're asking here on the public site versus the Partner =
site, but is this what you're after? About 1/2 way down.
http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicompliance.msp=
x

MBS doesn't seem to answer any questions here anymore unless its about =
POS2k9,

--=20

Jeff=20
Check Point Software

Search this newsgroup -- http://tinyurl.com/2lmk4w (Stolen from DRS)
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D

You must be using Outlook Express/Windows Mail or some other type of =
newsgroup reader to
see and download the file attachment(s). If you are not using a reader, =
follow
the link below to setup Outlook Express. Click on "Open with =
newsreader"
under the MS Retail Management System on the right.

http://tinyurl.com/75bgz
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D

"Casey Hanson - New West Technologies" =
The PCI Compliance requires the POS application to audit certain =
functions=20
like changing cashier passwords, etc.. It looks like this =
functionality was=20
built into the recent versions to meet compliancy. Is there any =
documentation=20
that can help us decipher the events that are inserted into the RMS =
database=20
AuditLog table? In particular - cashier created/deleted, login failed, =

password changes, any other POS activity around security.
------=_NextPart_000_0042_01CA6850.3E90F480
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3Dtext/html;charset=3Dutf-8 http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.6001.18852"></HEAD>
<BODY style=3D"PADDING-LEFT: 10px; PADDING-RIGHT: 10px; PADDING-TOP: =
15px"=20
id=3DMailContainerBody leftMargin=3D0 topMargin=3D0 =
CanvasTabStop=3D"true"=20
name=3D"Compose message area">
<DIV><FONT color=3D#008000>Casey,</FONT></DIV>
<DIV><FONT color=3D#008000></FONT> </DIV>
<DIV><FONT color=3D#008000>Not sure why you're asking here on the public =
site=20
versus the Partner site, but is this what you're after?  About 1/2 =
way=20
down.</FONT></DIV>
<DIV><FONT color=3D#008000><A=20
title=3D"http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicompl=
iance.mspx
CTRL + Click to follow link"=20
href=3D"http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicompli=
ance.mspx">http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicom=
pliance.mspx</A></FONT></DIV>
<DIV><FONT color=3D#008000></FONT> </DIV>
<DIV><FONT color=3D#008000>MBS doesn't seem to answer any questions here =
anymore=20
unless its about POS2k9,</FONT></DIV>
<DIV><FONT color=3D#008000></FONT><BR>-- <BR><BR>Jeff <BR>Check Point=20
Software</DIV>
<DIV> </DIV>
<DIV>Search this newsgroup -- <A=20
title=3D"http://tinyurl.com/2lmk4w
CTRL + Click to follow link"=20
href=3D"http://tinyurl.com/2lmk4w">http://tinyurl.com/2lmk4w</A>  =
(Stolen=20
from =
DRS)<BR>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D</DIV>
<DIV> </DIV>
<DIV>You must be using Outlook Express/Windows Mail or some other type =
of=20
newsgroup reader to<BR>see and download the file attachment(s).  If =
you are=20
not using a reader, follow<BR>the link below to setup Outlook =
Express. =20
Click on "Open with newsreader"<BR>under the MS Retail Management System =
on the=20
right.</DIV>
<DIV> </DIV>
<DIV><A title=3D"http://tinyurl.com/75bgz
CTRL + Click to follow =
link"=20
href=3D"http://tinyurl.com/75bgz">http://tinyurl.com/75bgz</A><BR>=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
</DIV>
<DIV> </DIV>
<DIV> </DIV>
<BLOCKQUOTE=20
style=3D"BORDER-LEFT: #008000 2px solid; PADDING-LEFT: 5px; =
PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<DIV>"Casey Hanson - New West Technologies" <<A=20
=
title=3D"mailto:CaseyHansonNewWestTechnologies@discussions.microsoft.com&=
#10;CTRL + Click to follow link"=20
=
CaseyHansonNewWestTechnologies@discussions.microsoft.com</A>>=20
wrote in message <A=20
=
+ Click to follow link"=20
=
64277-782B-4A1D-BE99-D1EDCF1FA03B@microsoft.com</A>...</DIV>The=20
PCI Compliance requires the POS application to audit certain functions =

<BR>like changing cashier passwords, etc.. It looks like this =
functionality=20
was <BR>built into the recent versions to meet compliancy. Is there =
any=20
documentation <BR>that can help us decipher the events that are =
inserted into=20
the RMS database <BR>AuditLog table? In particular - cashier =
created/deleted,=20
login failed, <BR>password changes, any other POS activity around=20
security.</BLOCKQUOTE></BODY></HTML>

------=

Posted by Dan-902 on November 18, 2009, 5:43 pm

Please log in for more thread options

: quoted-printable

Jeff you answer alot more question than MBS ever did...We are very lucky =
to have you as a member of this groups. Thanks again for a great answer.

Danny
Casey,

Not sure why you're asking here on the public site versus the Partner =
site, but is this what you're after? About 1/2 way down.
=
http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicompliance.msp=
x

MBS doesn't seem to answer any questions here anymore unless its about =
POS2k9,

--=20

Jeff=20
Check Point Software

Search this newsgroup -- http://tinyurl.com/2lmk4w (Stolen from DRS)
=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D

You must be using Outlook Express/Windows Mail or some other type of =
newsgroup reader to
see and download the file attachment(s). If you are not using a =
reader, follow
the link below to setup Outlook Express. Click on "Open with =
newsreader"
under the MS Retail Management System on the right.

http://tinyurl.com/75bgz
=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D

"Casey Hanson - New West Technologies" =
The PCI Compliance requires the POS application to audit certain =
functions=20
like changing cashier passwords, etc.. It looks like this =
functionality was=20
built into the recent versions to meet compliancy. Is there any =
documentation=20
that can help us decipher the events that are inserted into the RMS =
database=20
AuditLog table? In particular - cashier created/deleted, login =
failed,=20
password changes, any other POS activity around security.
------=_NextPart_000_0051_01CA687F.0B8DAD10
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

=EF=BB=BF<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3Dtext/html;charset=3Dutf-8 http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.6001.18852">
<STYLE></STYLE>
</HEAD>
<BODY style=3D"PADDING-LEFT: 10px; PADDING-RIGHT: 10px; PADDING-TOP: =
15px"=20
id=3DMailContainerBody leftMargin=3D0 topMargin=3D0 bgColor=3D#ffffff=20
name=3D"Compose message area" CanvasTabStop=3D"true">
<DIV><FONT face=3DArial>Jeff you answer alot more question than MBS ever =
did...We=20
are very lucky to have you as a member of this groups. Thanks again for =
a great=20
answer.</FONT></DIV>
<DIV><FONT face=3DArial></FONT> </DIV>
<DIV><FONT face=3DArial>Danny</FONT></DIV>
<BLOCKQUOTE=20
style=3D"BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; =
PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px"=20
dir=3Dltr>
<DIV>"Jeff @ Check Point Software" <<A=20
in message=20
<A=20
=
A6632-1641-48B3-9C43-653262DF63A3@microsoft.com</A>...</DIV>
<DIV><FONT color=3D#008000>Casey,</FONT></DIV>
<DIV><FONT color=3D#008000></FONT> </DIV>
<DIV><FONT color=3D#008000>Not sure why you're asking here on the =
public site=20
versus the Partner site, but is this what you're after?  About =
1/2 way=20
down.</FONT></DIV>
<DIV><FONT color=3D#008000><A=20
=
title=3D"http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicompl=
iance.mspx
CTRL + Click to follow link"=20
=
href=3D"http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicompli=
ance.mspx">http://www.microsoft.com/dynamics/rms/using/whitepapers/pcicom=
pliance.mspx</A></FONT></DIV>
<DIV><FONT color=3D#008000></FONT> </DIV>
<DIV><FONT color=3D#008000>MBS doesn't seem to answer any questions =
here anymore=20
unless its about POS2k9,</FONT></DIV>
<DIV><FONT color=3D#008000></FONT><BR>-- <BR><BR>Jeff <BR>Check Point=20
Software</DIV>
<DIV> </DIV>
<DIV>Search this newsgroup -- <A=20
title=3D"http://tinyurl.com/2lmk4w
CTRL + Click to follow link"=20
href=3D"http://tinyurl.com/2lmk4w">http://tinyurl.com/2lmk4w</A>  =
(Stolen=20
from =
DRS)<BR>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D</DIV>
<DIV> </DIV>
<DIV>You must be using Outlook Express/Windows Mail or some other type =
of=20
newsgroup reader to<BR>see and download the file attachment(s).  =
If you=20
are not using a reader, follow<BR>the link below to setup Outlook=20
Express.  Click on "Open with newsreader"<BR>under the MS Retail=20
Management System on the right.</DIV>
<DIV> </DIV>
<DIV><A title=3D"http://tinyurl.com/75bgz
CTRL + Click to follow =
link"=20
=
href=3D"http://tinyurl.com/75bgz">http://tinyurl.com/75bgz</A><BR>=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
</DIV>
<DIV> </DIV>
<DIV> </DIV>
<BLOCKQUOTE=20
style=3D"BORDER-LEFT: #008000 2px solid; PADDING-LEFT: 5px; =
PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<DIV>"Casey Hanson - New West Technologies" <<A=20
=
title=3D"mailto:CaseyHansonNewWestTechnologies@discussions.microsoft.com&=
#10;CTRL + Click to follow link"=20
=
CaseyHansonNewWestTechnologies@discussions.microsoft.com</A>>=20
wrote in message <A=20
=
+ Click to follow link"=20
=
64277-782B-4A1D-BE99-D1EDCF1FA03B@microsoft.com</A>...</DIV>The=20
PCI Compliance requires the POS application to audit certain =
functions=20
<BR>like changing cashier passwords, etc.. It looks like this =
functionality=20
was <BR>built into the recent versions to meet compliancy. Is there =
any=20
documentation <BR>that can help us decipher the events that are =
inserted=20
into the RMS database <BR>AuditLog table? In particular - cashier=20
created/deleted, login failed, <BR>password changes, any other POS =
activity=20
around security.</BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------=