Accessing and reading Windows log files and event viewer


You may also like...

4 Responses

  1. yann says:

    Hello,

    How can i log who accesses to the eventviewer ? say, user 1 open eventviewer to see a particular logs (security, app, systel,..) and i want an eventid to be generated in the eventlog that says user 1 has accesses to the eventlog.
    I try to enable audit on privilege success and put sacl in system drive:\Windows\System32\Winevt\Logs but all i have is users1 open mmc.exe instaead of eventviwer.exe.

    os: windows 2008 R2

    • Thom says:

      I don’t have Win 2008 R2, only worked with 2003. Anyway, I never needed user event viewer access logs. You should ask this kind of question in 2008 server forums.

  2. Simon Jivkov says:

    Hi,
    In which .log, if any, I could find info regarding the reasons for freezing of XP, going to standby?
    Thanks in advance.

Leave a Reply

Your email address will not be published. Required fields are marked *