- Suppression d’un utilisateur
- Cet évènement est généré lors de la suppression d’un utilisateur local de
com.apple.opendirectoryd. - Log Level (Niveau du journal)
- 1
- Requiert l’option Verbose (Détaillé)
- Non
AUE_delete_user Example
Exemple de journal de télémétrie pour la suppression d’un utilisateur.
{
"header": {
"time_seconds_epoch": 1657749116,
"time_milliseconds_offset": 791,
"version": 11,
"event_modifier": 0,
"event_id": 6209,
"event_name": "AUE_delete_user"
},
"host_info": {
"serial_number": "C03WG0H4HDTS",
"host_name": "Test_MacBook_Pro",
"osversion": "Version 12.4 (Build 21F79)",
"host_uuid": "8891C1E2-0AC0-4E4A-844B-EA491B14D115"
},
"identity": {
"signer_id": "com.apple.opendirectoryd",
"team_id_truncated": false,
"signer_id_truncated": false,
"cd_hash": "177176d0cf207d0cc1243488c2b3db9bbdcc71e5",
"team_id": "",
"signer_type": 1
},
"key": "D41FD5AE-48C0-468A-9B3C-5839397C0467",
"return": {
"error": 0,
"description": "success",
"return_value": 0
},
"subject": {
"responsible_process_id": 390,
"process_name": "/System/Library/PreferencePanes/Accounts.prefPane/Contents/XPCServices/com.apple.preferences.users.remoteservice.xpc/Contents/MacOS/com.apple.preferences.users.remoteservice",
"terminal_id": {
"type": 4,
"ip_address": "0.0.0.0",
"port": 2693
},
"effective_group_id": 20,
"user_id": 501,
"process_id": 1089,
"effective_group_name": "staff",
"effective_user_name": "jamf",
"user_name": "jamf",
"group_id": 20,
"group_name": "staff",
"audit_id": 501,
"audit_user_name": "jamf",
"process_hash": "cfcc225c215b60d200a014cafdf8f58ff27bc04c",
"effective_user_id": 501,
"session_id": 100003,
"responsible_process_name": "/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
},
"texts": [
"Delete record type Users 'baddie' node '/Local/Default'"
]
}