What's the Windows Server 2008 equivalent of the SecEvent.Evt file? So I can open the file itself on an external computer and see who logged in.
On my system, the path to the Security log is
but this seems to be configurable.
The general solution is, if you right click on a log in the Event Viewer and choose
Note the different extension, in Server 2008/Vista the event logging system was re-written including new file formats.
Better to use the standard APIs and tools (eg.