U-M Windows Forest
How-To Documents
Get Help

Requesting Access to UMROOT Logs

Information stored in logs on enterprise Windows servers may be requested, for example to investigate security breaches or to troubleshoot UMROOT authentication issues.

Before requesting access, please refer to Guidelines for Releasing Security Logs Information for general log access guidelines and to the table below for information specific to requesting logs from Windows servers. Once you have reviewed the guidelines, you can use the information below to make your request.

How to Place Requests (and Expected Response Times)

Impact Contact Expected Response from ITS
Catastrophic business impact:

Department's business has significant loss or degradation of services.

Needs immediate attention.
If data includes PII*:
ITUA@umich.edu
734 223-0798
734 320-2570

If no PII in data or not sure:
contact the ITS Service Center
  • 1st call response in 1 hour or less.

  • Delivery of log data within 4 hours.

Critical business impact:

Department's business has significant loss or degradation of services.

Needs attention within 1 hour.
If data includes PII*:
ITUA@umich.edu
734 223-0798
734 320-2570

If no PII in data or not sure:
ITS Service Center
764-HELP (for escalation or after hours)
  • 1st call response in 1 hour or less.

  • Delivery of log data that business day.

Moderate business impact:

Department's business has moderate loss or degradation of services.
If data includes PII*:
ITUA@umich.edu

If no PII in data or not sure:
ITS Service Center
  • 1st call response in 2 business hours or less.

  • Delivery of log data within 8 business hours.

Minimum business impact:

Department's business is substantially functioning with minor or no impediments to services.
If data includes PII*:
ITUA@umich.edu

If no PII in data or not sure:
ITS Service Center
  • 1st call response in 4 business hours or less.

  • Delivery of log data within 3 business days.

* PII = Personally Identifiable Information