It find "Elapsed Time" I tried it like Elapsed time and Elapsed Time: ...neither would find them in the doc. Here is a few chunks from diffrent areas of the doc.
delete Perm. ACE 6 builtin\administrators
: delete Perm. ACE 2 builtin\administrators
: new ace for builtin\administrators
: delete Perm. ACE 4 nt authority\system
: delete Perm. ACE 1 nt authority\system
: new ace for nt authority\system
: delete Perm. ACE 3 nt authority\restricted
: delete Perm. ACE 1 nt authority\restricted
: new ace for nt authority\restricted
: delete Perm. ACE 1 jennaspc\compaq_administrator
: delete Perm. ACE 0 jennaspc\compaq_administrator
: new ace for jennaspc\compaq_administrator
: builtin\administrators is the new owner
HKEY_CURRENT_USER : 13 change(s)
AppEvents : delete Perm. ACE 6 builtin\administrators
AppEvents : delete Perm. ACE 2 builtin\administrators
AppEvents : new ace for builtin\administrators
AppEvents : delete Perm. ACE 4 nt authority\system
AppEvents : delete Perm. ACE 1 nt authority\system
AppEvents : new ace for nt authority\system
AppEvents : delete Perm. ACE 3 nt authority\restricted
AppEvents : delete Perm. ACE 1 nt authority\restricted
AppEvents : new ace for nt authority\restricted
AppEvents : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents : new ace for jennaspc\compaq_administrator
AppEvents : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents : 13 change(s)
AppEvents\EventLabels : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels : new ace for builtin\administrators
AppEvents\EventLabels : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels : new ace for nt authority\system
AppEvents\EventLabels : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels : new ace for nt authority\restricted
AppEvents\EventLabels : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels : 13 change(s)
AppEvents\EventLabels\.Default : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\.Default : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\.Default : new ace for builtin\administrators
AppEvents\EventLabels\.Default : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\.Default : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\.Default : new ace for nt authority\system
AppEvents\EventLabels\.Default : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\.Default : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\.Default : new ace for nt authority\restricted
AppEvents\EventLabels\.Default : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\.Default : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\.Default : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\.Default : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\.Default : 13 change(s)
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\ActivatingDocument : new ace for builtin\administrators
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\ActivatingDocument : new ace for nt authority\system
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\ActivatingDocument : new ace for nt authority\restricted
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\ActivatingDocument : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\ActivatingDocument : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\ActivatingDocument : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\ActivatingDocument : 13 change(s)
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\AppGPFault : new ace for builtin\administrators
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\AppGPFault : new ace for nt authority\system
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\AppGPFault : new ace for nt authority\restricted
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\AppGPFault : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\AppGPFault : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\AppGPFault : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\AppGPFault : 13 change(s)
AppEvents\EventLabels\Banner : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Banner : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Banner : new ace for builtin\administrators
AppEvents\EventLabels\Banner : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Banner : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Banner : new ace for nt authority\system
AppEvents\EventLabels\Banner : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Banner : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Banner : new ace for nt authority\restricted
AppEvents\EventLabels\Banner : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Banner : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Banner : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Banner : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Banner : 13 change(s)
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\BlockedPopup : new ace for builtin\administrators
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\BlockedPopup : new ace for nt authority\system
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\BlockedPopup : new ace for nt authority\restricted
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\BlockedPopup : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\BlockedPopup : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\BlockedPopup : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\BlockedPopup : 13 change(s)
AppEvents\EventLabels\CCSelect : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\CCSelect : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\CCSelect : new ace for builtin\administrators
AppEvents\EventLabels\CCSelect : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\CCSelect : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\CCSelect : new ace for nt authority\system
AppEvents\EventLabels\CCSelect : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\CCSelect : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\CCSelect : new ace for nt authority\restricted
AppEvents\EventLabels\CCSelect : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\CCSelect : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\CCSelect : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\CCSelect : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\CCSelect : 13 change(s)
AppEvents\EventLabels\Close : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Close : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Close : new ace for builtin\administrators
AppEvents\EventLabels\Close : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Close : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Close : new ace for nt authority\system
AppEvents\EventLabels\Close : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Close : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Close : new ace for nt authority\restricted
AppEvents\EventLabels\Close : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Close : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Close : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Close : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Close : 13 change(s)
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\CriticalBatteryAlarm : new ace for builtin\administrators
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\CriticalBatteryAlarm : new ace for nt authority\system
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\CriticalBatteryAlarm : new ace for nt authority\restricted
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\CriticalBatteryAlarm : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\CriticalBatteryAlarm : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\CriticalBatteryAlarm : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\CriticalBatteryAlarm : 13 change(s)
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\DeviceConnect : new ace for builtin\administrators
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\DeviceConnect : new ace for nt authority\system
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\DeviceConnect : new ace for nt authority\restricted
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceConnect : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceConnect : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceConnect : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\DeviceConnect : 13 change(s)
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\DeviceDisconnect : new ace for builtin\administrators
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\DeviceDisconnect : new ace for nt authority\system
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\DeviceDisconnect : new ace for nt authority\restricted
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceDisconnect : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceDisconnect : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceDisconnect : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\DeviceDisconnect : 13 change(s)
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\DeviceFail : new ace for builtin\administrators
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\DeviceFail : new ace for nt authority\system
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\DeviceFail : new ace for nt authority\restricted
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceFail : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceFail : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\DeviceFail : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\DeviceFail : 13 change(s)
AppEvents\EventLabels\DragDrop : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\DragDrop : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\DragDrop : new ace for builtin\administrators
AppEvents\EventLabels\DragDrop : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\DragDrop : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\DragDrop : new ace for nt authority\system
AppEvents\EventLabels\DragDrop : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\DragDrop : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\DragDrop : new ace for nt authority\restricted
AppEvents\EventLabels\DragDrop : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\DragDrop : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\DragDrop : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\DragDrop : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\DragDrop : 13 change(s)
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\EmptyRecycleBin : new ace for builtin\administrators
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\EmptyRecycleBin : new ace for nt authority\system
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\EmptyRecycleBin : new ace for nt authority\restricted
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\EmptyRecycleBin : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\EmptyRecycleBin : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\EmptyRecycleBin : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\EmptyRecycleBin : 13 change(s)
AppEvents\EventLabels\FaxError : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\FaxError : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\FaxError : new ace for builtin\administrators
AppEvents\EventLabels\FaxError : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\FaxError : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\FaxError : new ace for nt authority\system
AppEvents\EventLabels\FaxError : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\FaxError : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\FaxError : new ace for nt authority\restricted
AppEvents\EventLabels\FaxError : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxError : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxError : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\FaxError : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\FaxError : 13 change(s)
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\FaxLineRings : new ace for builtin\administrators
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\FaxLineRings : new ace for nt authority\system
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\FaxLineRings : new ace for nt authority\restricted
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxLineRings : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxLineRings : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\FaxLineRings : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\FaxLineRings : 13 change(s)
AppEvents\EventLabels\FaxNew : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\FaxNew : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\FaxNew : new ace for builtin\administrators
AppEvents\EventLabels\FaxNew : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\FaxNew : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\FaxNew : new ace for nt authority\system
AppEvents\EventLabels\FaxNew : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\FaxNew : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\FaxNew : new ace for nt authority\restricted
AppEvents\EventLabels\FaxNew : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxNew : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxNew : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\FaxNew : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\FaxNew : 13 change(s)
AppEvents\EventLabels\FaxSent : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\FaxSent : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\FaxSent : new ace for builtin\administrators
AppEvents\EventLabels\FaxSent : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\FaxSent : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\FaxSent : new ace for nt authority\system
AppEvents\EventLabels\FaxSent : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\FaxSent : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\FaxSent : new ace for nt authority\restricted
AppEvents\EventLabels\FaxSent : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxSent : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\FaxSent : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\FaxSent : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\FaxSent : 13 change(s)
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 5 builtin\administrators
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 4 builtin\administrators
AppEvents\EventLabels\FeedDiscovered : new ace for builtin\administrators
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 3 nt authority\system
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 2 nt authority\system
AppEvents\EventLabels\FeedDiscovered : new ace for nt authority\system
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 2 nt authority\restricted
AppEvents\EventLabels\FeedDiscovered : new ace for nt authority\restricted
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\FeedDiscovered : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\FeedDiscovered : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\FeedDiscovered : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\FeedDiscovered : 13 change(s)
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\LowBatteryAlarm : new ace for builtin\administrators
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\LowBatteryAlarm : new ace for nt authority\system
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\LowBatteryAlarm : new ace for nt authority\restricted
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\LowBatteryAlarm : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\LowBatteryAlarm : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\LowBatteryAlarm : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\LowBatteryAlarm : 13 change(s)
AppEvents\EventLabels\MailBeep : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MailBeep : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MailBeep : new ace for builtin\administrators
AppEvents\EventLabels\MailBeep : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MailBeep : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MailBeep : new ace for nt authority\system
AppEvents\EventLabels\MailBeep : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MailBeep : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MailBeep : new ace for nt authority\restricted
AppEvents\EventLabels\MailBeep : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MailBeep : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MailBeep : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MailBeep : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MailBeep : 13 change(s)
AppEvents\EventLabels\Maximize : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Maximize : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Maximize : new ace for builtin\administrators
AppEvents\EventLabels\Maximize : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Maximize : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Maximize : new ace for nt authority\system
AppEvents\EventLabels\Maximize : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Maximize : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Maximize : new ace for nt authority\restricted
AppEvents\EventLabels\Maximize : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Maximize : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Maximize : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Maximize : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Maximize : 13 change(s)
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MenuCommand : new ace for builtin\administrators
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MenuCommand : new ace for nt authority\system
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MenuCommand : new ace for nt authority\restricted
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MenuCommand : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MenuCommand : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MenuCommand : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MenuCommand : 13 change(s)
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MenuPopup : new ace for builtin\administrators
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MenuPopup : new ace for nt authority\system
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MenuPopup : new ace for nt authority\restricted
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MenuPopup : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MenuPopup : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MenuPopup : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MenuPopup : 13 change(s)
AppEvents\EventLabels\Minimize : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Minimize : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Minimize : new ace for builtin\administrators
AppEvents\EventLabels\Minimize : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Minimize : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Minimize : new ace for nt authority\system
AppEvents\EventLabels\Minimize : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Minimize : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Minimize : new ace for nt authority\restricted
AppEvents\EventLabels\Minimize : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Minimize : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Minimize : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Minimize : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Minimize : 13 change(s)
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MoveMenuItem : new ace for builtin\administrators
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MoveMenuItem : new ace for nt authority\system
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MoveMenuItem : new ace for nt authority\restricted
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MoveMenuItem : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MoveMenuItem : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MoveMenuItem : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MoveMenuItem : 13 change(s)
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MSMSGS_ContactOnline : new ace for builtin\administrators
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MSMSGS_ContactOnline : new ace for nt authority\system
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MSMSGS_ContactOnline : new ace for nt authority\restricted
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_ContactOnline : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_ContactOnline : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_ContactOnline : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MSMSGS_ContactOnline : 13 change(s)
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MSMSGS_NewAlert : new ace for builtin\administrators
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MSMSGS_NewAlert : new ace for nt authority\system
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewAlert : new ace for nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewAlert : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewAlert : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewAlert : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MSMSGS_NewAlert : 13 change(s)
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MSMSGS_NewMail : new ace for builtin\administrators
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MSMSGS_NewMail : new ace for nt authority\system
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewMail : new ace for nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewMail : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewMail : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewMail : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MSMSGS_NewMail : 13 change(s)
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\MSMSGS_NewMessage : new ace for builtin\administrators
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\MSMSGS_NewMessage : new ace for nt authority\system
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewMessage : new ace for nt authority\restricted
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewMessage : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewMessage : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\MSMSGS_NewMessage : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\MSMSGS_NewMessage : 13 change(s)
AppEvents\EventLabels\Navigating : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Navigating : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Navigating : new ace for builtin\administrators
AppEvents\EventLabels\Navigating : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Navigating : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Navigating : new ace for nt authority\system
AppEvents\EventLabels\Navigating : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Navigating : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Navigating : new ace for nt authority\restricted
AppEvents\EventLabels\Navigating : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Navigating : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Navigating : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Navigating : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Navigating : 13 change(s)
AppEvents\EventLabels\Open : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Open : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Open : new ace for builtin\administrators
AppEvents\EventLabels\Open : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Open : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Open : new ace for nt authority\system
AppEvents\EventLabels\Open : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Open : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Open : new ace for nt authority\restricted
AppEvents\EventLabels\Open : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Open : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Open : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Open : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Open : 13 change(s)
AppEvents\EventLabels\Popup : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Popup : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Popup : new ace for builtin\administrators
AppEvents\EventLabels\Popup : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Popup : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Popup : new ace for nt authority\system
AppEvents\EventLabels\Popup : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Popup : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Popup : new ace for nt authority\restricted
AppEvents\EventLabels\Popup : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Popup : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Popup : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Popup : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Popup : 13 change(s)
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\PrintComplete : new ace for builtin\administrators
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\PrintComplete : new ace for nt authority\system
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\PrintComplete : new ace for nt authority\restricted
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\PrintComplete : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\PrintComplete : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\PrintComplete : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\PrintComplete : 13 change(s)
AppEvents\EventLabels\Reminder : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\Reminder : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\Reminder : new ace for builtin\administrators
AppEvents\EventLabels\Reminder : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\Reminder : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\Reminder : new ace for nt authority\system
AppEvents\EventLabels\Reminder : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\Reminder : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\Reminder : new ace for nt authority\restricted
AppEvents\EventLabels\Reminder : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\Reminder : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\Reminder : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\Reminder : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\Reminder : 13 change(s)
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\RestoreDown : new ace for builtin\administrators
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\RestoreDown : new ace for nt authority\system
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\RestoreDown : new ace for nt authority\restricted
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\RestoreDown : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\RestoreDown : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\RestoreDown : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\RestoreDown : 13 change(s)
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\RestoreUp : new ace for builtin\administrators
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\RestoreUp : new ace for nt authority\system
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\RestoreUp : new ace for nt authority\restricted
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\RestoreUp : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\RestoreUp : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\RestoreUp : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\RestoreUp : 13 change(s)
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\SbChangeSb : new ace for builtin\administrators
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\SbChangeSb : new ace for nt authority\system
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\SbChangeSb : new ace for nt authority\restricted
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\SbChangeSb : delete Perm. ACE 0 jennaspc\compaq_administrator
AppEvents\EventLabels\SbChangeSb : new ace for jennaspc\compaq_administrator
AppEvents\EventLabels\SbChangeSb : builtin\administrators is the new owner
HKEY_CURRENT_USER\AppEvents\EventLabels\SbChangeSb : 13 change(s)
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 6 builtin\administrators
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 2 builtin\administrators
AppEvents\EventLabels\SbCloseLmDrop : new ace for builtin\administrators
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 4 nt authority\system
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 1 nt authority\system
AppEvents\EventLabels\SbCloseLmDrop : new ace for nt authority\system
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 3 nt authority\restricted
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 1 nt authority\restricted
AppEvents\EventLabels\SbCloseLmDrop : new ace for nt authority\restricted
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 1 jennaspc\compaq_administrator
AppEvents\EventLabels\SbCloseLmDrop : delete Perm. ACE 0 jennaspc\compaq_administrator