0
votes
0answers
66 views

Event log with thousands of Audit Success events regarding cryptography

I have a Windows Server 2008 R2 Standard running IIS web apps, today the websites were operating fine however when I tried to use Teamviewer on it, it was extremely slow and was losing connection all ...
1
vote
1answer
164 views

Filtering Security Logs by User and Logon Type

I have been asked to find out when a user has logged on to the system in the last week. Now the audit logs in Windows should contain all the info I need. I think if I search for Event ID 4624 (Logon ...
2
votes
2answers
45 views

GPO set to trigger in response to an event?

I want to trigger an action/task when an event is raised in any computer of the domain. It this possible via GPO, do or I need to deploy script to all machines on the domain?
0
votes
0answers
54 views

Windows Server Audit Failure from Client

Every several minutes I get an audit failure from one of my clients running Windows 8 on ports 56280 to 56294 in the event log of my server which provides DHCP/DNS/DC for that client. Do you have any ...
-1
votes
2answers
112 views

Event Viewer Task for a specific task

I can create Event Viewer Tasks to react to Event IDs, but I'm having a tough time getting the XML working to react to an event ID to a specific task. I've been testing using the filter. The task ...
0
votes
1answer
41 views

Reading logs from Event viewer 2008 server

I found the path as to where the logs are stored -> %SystemRoot%\system32\winevt\logs When double clicking one of the .evtx logs it opens it in the event log viewer. Is there a way to open it without ...
0
votes
0answers
70 views

Error accessing server logs

Few weeks in a row I am noticing the following problem on my Windows 2008 Server event viewer cannot open the event log or custom view. verify that event log service is running or query too long. ...
4
votes
1answer
628 views

Can I disable Windows Event Logging for a certain service?

We have a legacy application running on a Windows Server 2008 VM from Azure that is spamming our windows event log every minute or so. I do not have access to the source for the bit of code that is ...
1
vote
1answer
281 views

What is the Event id for File & folder creation in Window Server 2008

I have enabled Object level access in event viewer, but i am unable to find the exact date & time, when the user create a file or folder. Do you know, how to find out the time & date in event ...
0
votes
1answer
153 views

Kernel-General events missing in the eventlog of Windows 2008 Standard Edition

I can't find any Microsoft-Windows-Kenel-General events in the event log. It is a Windows 2008 Standard Edition server. Is there any setting that has to be switched on for them to be logged? The ...
2
votes
1answer
1k views

Group Policy settings for Event Logs

On a Windows Server 2008 R2 Standard Edition Domain Controller, with Windows 7 and Windows XP clients, is it "OK" to keep the setting below for Event Log files? And which setting will apply? ...
5
votes
2answers
2k views

Is there any way to undo after clearing a log on Windows 2008 server?

I accidentally cleared a event log. Is there any way I can get it back?
3
votes
0answers
92 views

Corrupt General Tab in Event Viewer

Whenever ASP.NET reports a dangerous query string value to the Application log and the request contains a certain combination of characters; the event viewer will not show the error information and ...
1
vote
0answers
85 views

Client Address is not showing correct in Event Log

I had enable the Advance Audit Policy Configuration on my Domain Controller. Server OS - Window Server 2008 R2 Standard. Client OS - Window XP Whenever the Domain User enter wrong password for ...
2
votes
1answer
361 views

Lots of FAILURE AUDIT: an account failed to log on entires in Security Log

I have received lots of failure audits on my server. From the log, I have identified the particular machine that is the culprit. How can I identify which process is sending the login request? Do you ...
3
votes
1answer
12k views

Event 36888 : The following fatal alert was generated: 10. The internal error state is 1203

I search on the Internet, but i am unable to find, Why this error is coming? It has flooded my Event Viewer, after interval of 1 minutes, this Error pops-up. ( means the frequency is 1 minutes ) I ...
1
vote
0answers
715 views

What could cause local folders in a Windows 2008 DFS replication group to randomly obtain system and hidden attributes

We have a Windows 2008 server (not R2) acting as a primary file source in a DFS replication group with a single other server that happens to be Windows Storage Server 2008. All is well in terms of ...
1
vote
2answers
553 views

Monitor state of “Startup Type” of services

I would like to be able to monitor when the state of "Startup Type" for a particular service is changed from Automatic to Manual. I haven't been able to find an event that is triggered in event ...
2
votes
3answers
2k views

Unknown and strange RDP successful logins in EventViewer

I have a Windows Server 2008 R2 with a valid IP, and recently I've found hundreds of unknown and strange RDP successful logins logged in EventViewer. Here are some details: They are not similar to ...
1
vote
1answer
983 views

Can't open the event viewer in Windows Server 2008?

Yesterday i just finished installing a file server running Windows 2008 to our company. Now i've noticed that somehow i can't open the event viewer with my standard administrative account. I've ...
0
votes
1answer
267 views

Generate Custom View logs for email to admins

I want to create a scheduled task that will take a custom view I have created in Server 2008 Event Viewer and email all the events in a .xml format once a week (Monday morning). Bonus points if you ...
0
votes
2answers
679 views

How to find the source of a cryptic event viewer log

I'm looking at the eventviewer logs, and I see a bunch Error entries in the Application log. (Windows Server 2008 R1). There is an error written to the logs about every 4 seconds. I need to find ...