0
votes
0answers
9 views

Feature 'SpellingFiles_ESN' does not exist

I'm getting lots of MsiInstaller warnings posted in my event logs for the following error - Detection of product '{00000409-78E1-11D2-B60F-006097C998E7}', feature 'SpellingFiles_ESN', component ...
0
votes
0answers
127 views

Windows server 2003. Windows search service error. Unable to initialize the filter host process

I was trying to install SQL server management studio 2008 on Windows Server 2003 SP2 x86 Standard edition and but I couldn't install it. I got an error saying install "Windows Installer 4.5" so I ...
0
votes
3answers
343 views

Windows Server 2003: start program on event in event viewer

With windows server 2008 you can start a program using scheduled task triggered by event on event viewer. Is there a way to emulate this with Windows Server 2003? Thank you in advance
1
vote
0answers
50 views

JAVA task reporting perodic file access issue but windows file auditing says it never tried?

Ok so you've got a JAVA task that reads a file on my local disk when it runs, it immediately closes the handle on the file right after it reads its, less than a second, nothing else on the entire ...
1
vote
1answer
856 views

How to automatically backup Windows event logs?

There doesn't appear to be a way to backup (archive) Windows event logs automatically via the GUI. Is there a way via a script that can be set as a scheduled task to do this? If so, can someone ...
0
votes
1answer
217 views

Suspicious port scanning of spoolsv.exe on Windows server 2003 w/ Print server role

Noticed today on one of the servers, that Event viewer/Security has lots of "Failure audit" messages like this: The message repeats every second and the port number is increased by one the range ...
1
vote
1answer
253 views

Remote Desktop IP missing in Event Log

I was checking my remote desktop event logs and an entry is confusing for me. The event was a normal log on event with a username, but at details have a dash (-) for the source IP instead of a source ...
0
votes
2answers
1k views

Permissions needed to read event log messages remotely?

When running under a limited account, local event log messages are displaying fine, for remote computer I am getting this error: The description for Event ID ( xxxxx ) in Source ( yyyyy ) cannot be ...
3
votes
1answer
268 views

Audit when users log on and off servers

We have contractors periodically remoting into our production servers and goodness know what changes that they could potentially make. So What can I use to log when users log on or off a server(s)? ...
0
votes
2answers
2k views

Server Hanging - Server Event Viewer

We are experiencing problems with our dedicated server, where it is hanging quite often (sometimes in the space after a few hours after a power cycle). I've looked in the Events Viewer and under ...
0
votes
1answer
1k views

Event ID 6009: is this event triggered only when a user-initiated shutdown has occurred?

Like the title says. From what I've briefly read, 6009 occurs when CTRL-ALT-DEL or Start > Shutdown is initiated by a user. If a shutdown sequence is initiated by SYSTEM for example, would this ...
3
votes
3answers
2k views

How to export all System event logs of a definite time period

I am working on a Windows Server 2003 SP2 with Powershell v2, and I am looking for a way to export all System event logs of a definite time period, (say, from Saturday 2000 hours to Sunday 1100 ...
0
votes
1answer
57 views

Trying to delete an object from the local group policy editor on a windows 2003 r2 member server in a domain

I've used this Serverfault Article in order to add additional event logs for some webservices to the local group policy on my interfaces server. For 2 objects i added, i had a mistype and it created 2 ...
1
vote
1answer
133 views

Is ETW available in Windows Server 2003?

We have an application that is writing to ETW (event tracing for windows) using an ETWTrackingParticipant for trace output. Does anyone know if ETW is supported in Windows Server 2003 or if it only ...
4
votes
1answer
2k views

Where can I view active directory failed logon attempts?

I do not see any failed logon attempts in my windows sever 2003 security event log (I see only successful ones). However, I have a user that is getting locked out very often and I need to try to ...
0
votes
1answer
1k views

Windows cannot access the file gpt.ini for GPO error

One of my users had a BSOD this morning, so I looked at the event log to see what could be the cause. I didn't find anything obvious related to the BSOD, but I did find something else which causes me ...
0
votes
2answers
648 views

Most efficient way to allow a specific user access to event log?

What is the most efficient way to allow a specific user access to event logs? I have come across a method to enforce permissions using local security policy and group policy, but it seems overly ...
1
vote
3answers
577 views

Monitor Windows event logs for an event and execute a VBS script

I need a free way to monitor the Windows event logs and when a particular event is logged I need to kick off a VBS script. Is there a tool that can do this?
0
votes
1answer
96 views

how to centerlized Client Machine Event Log Auditing to one server?

We have Windows Server 2003 Enterprise DC for 2000 Windows XP SP3 Client Machine. We just want to centralized audit account logon/logoff event, security event log in windows client on one server. we ...
3
votes
1answer
3k views

How do I fix a custom Event Viewer Log that merges automatically with the Application log?

I am trying to create a custom event log for a Windows Service on Windows Server 2003. I would like to name the custom log "(ML) Startup Commands". However, when I add a registry key with that name to ...
0
votes
1answer
1k views

Server 2003 - Event Viewer 540 Anonymous Logon from strange IPs

The Event Viewer for my Windows Server 2003 machine is flooded with these 540 login attempts from IP addresses in foreign countries. It looks like somebody is trying to access my machine - what sort ...
1
vote
1answer
823 views

The previous system shutdown at xxxx was unexpected

For the past two nights we had a remote server shutdown unexpectedly. When rebooted we get the following message: Event Type: Error Event Source: EventLog Event Category: None ...
0
votes
3answers
143 views

How can I find who or what deleted files in the system32 directory?

We have a Windows 2003 development server (IIS and SQL Server) with remote desktop access and some employees have admin rights. A couple weeks ago, a lot of important files (dlls, exes, msc and other ...
0
votes
2answers
122 views

Extreme slowdown when changing folder permissions

Last Friday I attempted to set permissions on a folder containing multiple folders. I simply deleted one user group's access entry, then clicked Apply and was greeted with an hourglass. Pretty soon ...
2
votes
5answers
4k views

What is the best tool for to capturing Windows Event Logs centrally?

We have a collection of about 100 Windows 2003 and Windows 2008 R2 domain controllers that I would like to start capturing Event Log data from. Many of the servers are very busy and generate large ...
2
votes
1answer
240 views

Server 2003 DNS Auditing

I used the instructions on the following link to set up DNS auditing on Server 2003: http://blogs.technet.com/b/yuridiogenes/archive/2008/03/06/auditing-a-dns-zone.aspx It works. When ever a forward ...
2
votes
2answers
4k views

Tracking who installed Software on server

Am I correct, that if a program is installed on a Server and shows up in the 'Add Remove/Program programs', then it must have been installed when a user has logged onto the server either at the ...
1
vote
2answers
1k views

Where to grant an account permissions for event log

My asp.net application does not have the permission to write to windows event log. It is running under Network Service account. Is there any tool/management console rather than hack in the registry to ...
1
vote
2answers
864 views

What's spamming my System event log?

The following event floods the log pretty harshly, pushing out other important events from the record. Is there any way to determine from the data which service is failing? Event Type: Error Event ...
1
vote
1answer
724 views

Enable Permissions To Write To Event Log

I have an ASP .Net app running on a windows 2003 server. If the application throws an exception I want the exception to be written to the event log. I have this implemented but when an exception is ...
0
votes
1answer
1k views

Get the “source network address” in Event ID 529 audit entries on Windows XP

In windows server 2003 when an Event 529 (logon failure) occures with a logon type of 10 (remote logon), the source network IP address is recorded in the event log. On a windows XP machine, this (and ...
0
votes
1answer
438 views

Windows: Audit/View logins from remote networks?

i want to audit remote connection attempts to a Windows 2003 Server. i've changed the group policy to show logon successes and failures: >gpedit.msc Local Computer Policy Computer ...
2
votes
1answer
1k views

Tracking which computer printed a document on Windows 2003 domain

Currently, when a user prints a document there is an Event ID 10 recorded in our event log. We have mostly XP Clients on a Win2003 domian. However, I cannot tell which computer this user printed a ...
4
votes
4answers
4k views

“Account locked out” security event at midnight

The last three midnights I've gotten an Event ID 539 in the log...about my own account: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 539 Date: ...
1
vote
1answer
88 views

I would like to prevent these entries from being added to the eventlog

Our client's application EventLog is getting filled up with warnings due to a bug in the Microsoft SQL Server report viewer control, http://support.microsoft.com/kb/973219. They have thousands of ...
0
votes
2answers
129 views

windows 2003 server policy error

i saw these two errors on my windows 2003 server from last few days can you please tell me what is these errors and how to remove them
1
vote
2answers
423 views

A lot of logon/logoffs events in Windows event log

I have a server that contains Team Foundation Server which we use for source control. This server is windows server 2003, however it is not our domain server. When we do a large 'get latest version' ...
-1
votes
1answer
219 views

EventID 333 in Windows Server 2003

Can somebody please let me know is there any problem that this error can cause if we don't apply any fix to it. Please let me know. Thanks!
0
votes
1answer
760 views

Event ID 566 - Deleted Objects - Exchange Server

Getting alot of these on one of the DCs security log: *Event Type: Failure Audit Event Source: Security Event Category: Directory Service Access Event ID: 566 Date: 27/01/2010 Time: 10:12:41 User: ...
1
vote
2answers
1k views

Event logs on multiple server

I am looking for tools that will allow me to aggregate and query event logs from multiple servers. In my case, this is a webfarm and I need to be able to query the event logs for all of them in one ...
0
votes
1answer
2k views

IIS6 + Umbraco: Service Unavailable

On our test box we're intermittently getting a blank page with "Service Unavailable" when trying to access one particular site that is built in Umbraco. Other sites are fine. We seem to get a few ...
0
votes
3answers
4k views

Windows Server 2003 - “The security log on this system is full.” message when logging in

When I remote desktop into one Windows Server 2003 machine, I get a popup message saying "The security log on this system is full." When I open the Event Viewer, the security log size is 512.0 KB, ...
2
votes
4answers
252 views

who is sending mail in exchange?

I have noticed huge amounts of email going to random .com.tw domains. My Exchange event log its erroring with them every few seconds. I am wondering is it possible to see which computer this is coming ...
0
votes
3answers
7k views

Event Log: atapi - the device did not respond within the timeout period - Freeze

I have a Windows Server 2003 that stops working randomly (displays image on monitor but is completely frozen), all I could found on the event log as causes were an error from atapi and a warning from ...
1
vote
3answers
11k views

How do I find the reason for the last shutdown in Windows Server 2003?

I have a windows server 2003 system which restarted for no apparent reason. Everything seems to be running fine now, but I want to know why it shutdown. I don't see any obvious signs of problems in ...
7
votes
3answers
10k views

Windows Event Log Rotation?

Windows Server 2003. Is there any way to easily rotate event logs (or automatically clear and save)? I'm doing a bit of auditing on this machine and my security log gets real big real quick and ...