0
votes
0answers
31 views

Get delete events with file name and user for particular folder

In my windows server 2012 i want to know which files is deleted from a folder by which network user. I want to track delete events only for particular folder. I have done it using group policy and ...
0
votes
0answers
12 views

Windows event log administrative actions

Is there an entry in the event log entry that notifies that a user tried to perform an action that requires administrative authorization? Even if that user clicked cancel afterwards, I'd like to know ...
0
votes
1answer
74 views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
0
votes
1answer
15 views

Offline Windows Event ID Solution?

In my work i have many buildings with no internet , is there a program or an offline database for errors with event ID for Microsoft , so that will save my time for calling my assistants to search for ...
1
vote
1answer
102 views

Is there anyway to see when a Windows firewall rule was created/enabled using PowerShell v2 or CMD?

I have been poking around the interwebs but I cannot seem to find a definitive answer to this question. I am forced to work with PowerShell v2. I know that using the following command will give me a ...
5
votes
1answer
107 views

How can I determine who is connected to event log remotely?

Is there a way to figure out which user and/or which computer is remotely accessing my computer's Windows event log files? These accesses are locking applications on the local computer and thereby ...
1
vote
1answer
46 views

Getting Microsoft Security Essentials to alert me when a threat has been found

Is there a way of getting Microsoft Security Essentials to alert me when a threat has been found? I recently went through the log tab of Windows Defender and found a number of threats in the ...
0
votes
0answers
36 views

How can I log process creation w/ parameters in Windows

We need to log all process creation on a Windows 7 machine. We already know about enabling Audit Process Creation events on Group Policy, but we need the most information about it we can get. The most ...
0
votes
0answers
49 views

Advanced Filter for Windows Task Scheduler

I am trying to schedule a task whenever I insert a disk into an external HDD drive (Delll RD1000). The drive device issues an Application event with a common Source value for all events (whether it ...
0
votes
1answer
63 views

Route Events Recorded in System Event Log to Custom Event Log

I have an instance of Windows Server 2008 running some specific services that support my application. There are events within the Windows Events System Log generated for my services but by other ...
2
votes
1answer
26 views

Some sort of bootlog or system info log in Windows 7

I was wondering if there is some sort of "Bootlog" file or anything similar in which I can (at least) see when the computer was booted. So at what date and time that happened. So basically I need a ...
2
votes
1answer
991 views

Is there a log file for RDP connections (with system-name)

Is there any possible way to know the system name of the system which has taken the system remotely? From the logs we are able to know the username (but these are generic login IDs) and the IP (but we ...
0
votes
2answers
85 views

Event log monitoring tool [closed]

Presently, we have more than 25 servers in our network and we check the event logs for each server once in a week to find out events related to application, system warnings, errors etc. This task ...
0
votes
0answers
9 views

Eventtrigers on Windows 7 console-based

In my Company I have to set up Event-Triggers. We want to monitor our Event-Logs in a lightweight and easy way. As a Requirement from the management we have to use the System-Tools. So I found the ...
2
votes
1answer
310 views

Windows Event Log SystemTime format

The follwing timestamp was created during an Windows Security Log TimeCreated [ SystemTime] 2013-10-07T07:31:09.122037600Z In this timestamp I can't understand what 122037600Z part means? Do ...
1
vote
1answer
2k views

Retrieving last Login and Logout time in windows

How do I get the last login and logout time of a Windows user using a VB script or command? Tried using C:\> net user username | findstr /B /C:"Last logon" but it says username could not be found. ...
-1
votes
1answer
28 views

Error installing service, cant access/edit security log? [closed]

I'm trying to install a proprietary service on a client machine and I continue to run into the same issue I've checked all the user permissions even though I'm on an admin account. I also checked ...
2
votes
4answers
2k views

Does Windows log programs that have been run/called?

In Windows, is there a log that records what programs were run/called? While browsing the internet, viewing a static page with no ads, mouse clicks, keypresses, or miscellaneous ...
0
votes
2answers
215 views

Lenovo Power Dial Software causing Errors

I am using Windows 7 Professional 64 Bit Lenovo IdeaCentre K330. Recently i checked my Windows Event Viewer and i see that I have got a lot of the following error's: SideBySide Event ID: 33 ...
1
vote
0answers
82 views

Windows Event Forwarding between two computer out of a domain

I've got two computers and I want to set up event forwarding between them. Source computer is out of a domain, another is in some Domain. I tried to configure source initiated event subscrption but it ...
0
votes
1answer
108 views

Unique Identifier of an individual event in the system log?

I searched for a specific Event ID (6008 Unexpected Shutdown) in the Windows 7 Event Viewer, but now I want to see the events in the log that led up to that event, so how can I search for that ...
0
votes
1answer
1k views

Component Services Error Log - SQL Server Distributed Replay Client

I am getting the following error on a Windows Server 2008 x64 R2 Virtual Machine install: Log Name: System Source: Distributed COM Event ID: 10016 Level: Error Date: 2/20/2013 8:22:14 AM The ...
0
votes
1answer
254 views

Daily “computer on” time from Windows logfiles

I'd like to know how long our computer is on, i.e. not in standby mode, for any given calendar day. Is there a (free) program that extracts this information from the Windows System event log into, ...
-1
votes
1answer
206 views

who initiated log off

I found following record in the windows event log: Application popup: Windows : Other people are logged on to this computer. Shutting down Windows might cause them to lose data. Do you want to ...
1
vote
0answers
277 views

Eventlog error id 22 post 512b -> AdvFormat harddrive clone

I just cloned Vista from a 512b/sector drive to an Advanced Format 4kb/sector drive. I've fixed all the nightmarish problems that caused except for one, upon which I'm stumped. Every time the system ...
3
votes
2answers
2k views

How do I decode the “Faulting application start time” in a Windows event log entry?

An app I was running crashed and I wanted to know when it happened, so I opened up the Windows event viewer and looked for an entry. I found the entry, and then noticed one of the details of the ...
1
vote
1answer
626 views

Why is event-log time different from taskbar time?

Today is the first time in several months that I've opened up Administrative tools to view the event log. Imagine my consternation when I saw events in the log with a time-stamp of 11/09/2012. The ...
2
votes
4answers
1k views

How to find out how often my Windows partition has been defragmented?

I know that Windows uses its defrag program to defragment my partition sometimes when my system goes to an idle state. Also, sometimes I used to execute defrag by myself in order to increase ...
3
votes
1answer
3k views

Windows Event Log - Installs

Is there a way to find distinct program installs in the Windows Event log? I have tried looking for a specific ID to look for but cannot find one that references installs. If not, is there an easy way ...
16
votes
2answers
9k views

Are USB unplug events logged in Windows 7? (When was my mouse stolen?)

I know this sounds kind of ridiculous, but someone stole my mouse from my cubicle.. I came to work in the morning and was about to give my mouse a little shove to wake up the monitor, but it wasn't ...
1
vote
2answers
155 views

Event Log analytics?

My Windows Event Log is being spammed by the same entry over and over again (an authorized entry managed by my workstation's keepers). I need to convey the frequency with which the entries are being ...
0
votes
1answer
536 views

Windows keyboard macro playback software?

Many years ago, I had a product called Quickeys for the Macintosh that allowed me to record keyboard and mouse events and create a macro that could be assigned to a keyboard accelerator. This was a ...
3
votes
2answers
897 views

Mozy fails along with this error

Any idea how to fix this? MozyHome backup is failing at the same time with a FilesystemError2. Windows 7 64-bit. Thanks! Log Name: Application Source: VSS Date: 12/18/2009 ...
2
votes
1answer
4k views

Is it possible to access the Windows event log if the system is unbootable?

If an installation of windows is unbootable, is it possible to access the event log from a Linux LiveCD?