Accessing and reading Windows log files and event viewer

You may also like...

9 Responses

  1. yann says:


    How can i log who accesses to the eventviewer ? say, user 1 open eventviewer to see a particular logs (security, app, systel,..) and i want an eventid to be generated in the eventlog that says user 1 has accesses to the eventlog.
    I try to enable audit on privilege success and put sacl in system drive:\Windows\System32\Winevt\Logs but all i have is users1 open mmc.exe instaead of eventviwer.exe.

    os: windows 2008 R2

    • Thom says:

      I don’t have Win 2008 R2, only worked with 2003. Anyway, I never needed user event viewer access logs. You should ask this kind of question in 2008 server forums.

  2. Simon Jivkov says:

    In which .log, if any, I could find info regarding the reasons for freezing of XP, going to standby?
    Thanks in advance.

  3. Karthick says:

    Anyone knows about sorting techniques which used on event viewer log??

  4. Anyone know how to correct message (problem): “Two IP addresses found” indicating there is another computer with same IP number. There is only one PC here.

    • Thom says:

      You have to provide more info on this issue. If you are on some kind of WIFI network, then maybe DHCP server issued one more identical IP address by mistake…

  5. Lonsy Tohothegna says:

    please help me to identify another network with my IP address. He stole my phone and used my email see my mails.

    Please, close and lock this phone. The phone’s IMEI Number is 355524051804367 or possible identify his position and let me know.

    Thank you.


    • Thom says:

      Sorry, Lonsy, but I can’t help you here. You should call the police or the network service provider, they should be able to help you.

Leave a Reply

Your email address will not be published. Required fields are marked *