This tag is for questions about Windows' Event Viewer. Event Viewer is where Windows stores logs generated by the Operating System and certain applications.

learn more… | top users | synonyms

14
votes
2answers
39k views

View Shutdown Event Tracker logs under Windows Server 2008 R2

I'm trying to view the Shutdown Event Tracker logs in the Event Viewer, on windows server 2008 r8, but I can't find the messages that I supplied when previously restart the server. Where in the Event ...
0
votes
1answer
61 views

aggregate local events in AD

How can I aggregate events from event viewer log (logins with local Administrator) from all computers (atleast the servers - 2003,2008,2008r2) in an AD domain?
1
vote
0answers
422 views

Event viewer filtering - MS Sql server - How to filter logins from outside?

I want to filter event log to show SQL logon that was initiated from other machines, I have thousands of logins from local machine and few ones from other machines. I want to monitor that connections ...
4
votes
5answers
2k views

shortcut for Eventvwr > Connect to another computer

I was wondering if you can write the following action in a batch command? eventvwr (open the event viewer) Menu Action > Connect to another computer Type in the name of the computer. Connect. This ...
1
vote
2answers
388 views

Syslog - capturing event logs from Win2k boxes

I asked this question in SuperUser without much luck and so I am posting it here to see if anyone can assist. We have a central syslog server and we want it to capture event log events from Windows ...
4
votes
2answers
2k views

users unable to view security log in event viewer

I want to create a user account who are able to view security log in event viewer but not as a administrator but just as a power user. I had been getting this error when I click the security ...
0
votes
1answer
1k views

Exchange 2010: Replication Service Still Trying to Replicate Deleted Mailbox Store

In advance, thank you for your opinions! I just migrated from Server/Exchange 2003 to Server 2008 SR2 running Exchange 2010. I had an extra mailbox that appeared with some system mailboxes in it. I ...
2
votes
2answers
3k views

Event 4098, 0x80070533 Logon failure: account currently disabled?

Having started to upgrade our PCs to Windows 7 we have noticed that we are getting group policy warnings in Event Viewer such as: "The user 'Word.qat' preference item in the 'a_Office2007_Users ...
3
votes
3answers
8k views

Is there something like windows event viewer in linux platform?

I can check all kinds of error info with event viewer, but I'm not yet aware of there is such utility in linux, I can only check error logs of a specific application, or is there such a tool in ...
0
votes
1answer
263 views

Event ID 3009 on SBS 2003 R2

Getting the following error on my SBS 2003 R2 Server: Server ActiveSync: Unexpected Exchange mailbox Server error: Server: [celeritympp.mpp1.local] User: [jwhalen@mpp1.com] HTTP status code: [409]. ...
0
votes
1answer
8k views

Is it possible to enable logging of RDP connections / disconnections under Windows XP and Windows 7?

As the title suggests, I'm trying to keep an eye on RDP connections / disconnections to a couple of machines. One's running Windows XP and one's running Windows 7. I've checked the event logs on the ...
1
vote
2answers
6k views

WinXP Event Viewer: Internet Explorer - how to log events?

I'm trying to debug a strange rendering/interaction issue with a web application in IE and thought I'd peek at the event viewer in Windows (XP) to see if anything odd was happening at the same time. ...
1
vote
1answer
148 views

Event Viewer ID for start events

What is the Event ID code in the Windows Event Viewer that will tell me: Server has started IIS has started Is there a place online where I can look these things up? Thanks! Chris
1
vote
1answer
434 views

Access to server's application event log without being a PowerUser

Is there a way to grant users access to the Application Event Log on a server without making them a PowerUser on the server? There are other tools that we can use (syslog or elmah), but it would be ...