How to find the ip address of the user name who login into Backup Server and cancelled the Be2010 daily Job:

[StockholmGuy]

Some of the user has logged into the backup  server and cancelled the job.That user account has many users that can use it but all users have unique ip address for his machine. how i can find the ip address of the user name who cancelled the job .any idea ??

Thanks

[pkh · Accepted solution]

BE does not keep track of the IP address of the users who logon to it. 

[Ken_Putnam]

Look in your DHCP server logs to see who had the IP address at the appropriate time

[Kashif_ali]

Hey Dude !

Check the security event logs.

Regards!

Kashif

[CraigV]

...I'd have a look at the Security log on the server to see who was logged on at that specific time. That's from a Windows perspective.

If you open up BE and go to Alerts, you can see what happened on the media server. Loog for an entry for the job cancellation, and it will show you which user cancelled the job. Unfortunately, if someone else knows your service account and logged on with that, it makes life a lot tougher...