U-M Windows Forest
ITS Windows-Based Services
How-To Documents
Frequently Asked Questions
Help
Contact Us
U-M Windows Forest Main

Requesting Access to UMROOT Logs

Information stored in logs on enterprise Windows servers may be requested, for example to investigate security breaches or to troubleshoot UMROOT authentication issues.

Before requesting access, please refer to Guidelines for Releasing Security Logs Information for general log access guidelines and to the table below for information specific to requesting logs from Windows servers. Once you have reviewed the guidelines, you can use the information below to make your request.

How to Place Requests (and Expected Response Times)

Impact Contact Expected Response from ITS
Catastrophic business impact:

Department's business has significant loss or degradation of services.

Needs immediate attention.
If data includes PPI*:
ITUA@umich.edu
734 223-0798
734 320-2570

If no PPI in data or not sure:
contact the ITS Service Center
  • 1st call response in 1 hour or less.

  • Delivery of log data within 4 hours.

Critical business impact:

Department's business has significant loss or degradation of services.

Needs attention within 1 hour.
If data includes PPI*:
ITUA@umich.edu
734 223-0798
734 320-2570

If no PPI in data or not sure:
ITS Service Center
764-HELP (for escalation or after hours)
  • 1st call response in 1 hour or less.

  • Delivery of log data that business day.

Moderate business impact:

Department's business has moderate loss or degradation of services.
If data includes PPI*:
ITUA@umich.edu

If no PPI in data or not sure:
ITS Service Center
  • 1st call response in 2 business hours or less.

  • Delivery of log data within 8 business hours.

Minimum business impact:

Department's business is substantially functioning with minor or no impediments to services.
If data includes PPI*:
ITUA@umich.edu

If no PPI in data or not sure:
ITS Service Center
  • 1st call response in 4 business hours or less.

  • Delivery of log data within 3 business days.

* PPI = private personal information

Escalation Process

If initial response or delivery of log data is not provided within the expected time, escalate the request by contacting the following in order:

Tony Weil
tweil@umich.edu
734 615-5277 (office)
734 657-1181 (cell)


John Hufziger
hufziger@umich.edu
734 936-7596


Jim Bujaki
jbujaki@umich.edu
734 763-2088