Windows Event Viewer is a utility that shows users logs of events generated by the Windows operating system, and applications/services running on Windows.

learn more… | top users | synonyms

0
votes
2answers
41 views

Where Does One Find Logs of Pentesting Tools on Windows

I'm scanning my Windows 8 machine with Nmap and OpenVAS (from a different machine on my LAN and another one over WAN) and I'm looking for logs for the occurrence of such events in the Event Viewer but ...
2
votes
1answer
88 views

Windows 7 (Home Premium): eventvwr.exe: How to log workstation locking and unlocking and screensaver invoked and dismissed events

I have found the following information pertaining to when a user starts and stops interacting with a Windows 7 Home Premium 64-bit PC. Theoretically, these events can be viewed in eventvwr.exe when ...
2
votes
1answer
9k views

Event ID:4797 “An attempt was made to query the existence of a blank password for an account.”

On my Windows 8.1 desktop, I see a lot of messages like this from lsass.exe in the Event Viewer's audit log: An attempt was made to query the existence of a blank password for an account. Subject: ...
1
vote
1answer
1k views

How to solve Windows 7 regular hangs after fresh install. Some diagnosis done but can't pin down

I am getting regular hangs on my windows 7 machine imedietly after installation and after updating drivers. The machine is a Dell XPS 15 (L521x). It happens approximately once every few minutes. ...
1
vote
1answer
2k views

Internet access status, windows 7 event viewer

I have a pc working 24/7 and the internet connection disconnect and reconnect several times in the day, and I would like to know log history of the internet status logged by this pc, is it possible ...
1
vote
1answer
4k views

Can't Open Up Event Viewer

I just installed a large backlog of Windows Updates (I have Windows 7 Ultimate 64-bit) and now a handful of programs are acting strangely (not opening, crashing, etc) I went to try to diagnose the ...
0
votes
1answer
109 views

Windows 7: What is the event ID for a lock event and how to tell if it is user-initiated or not?

The following eventvwr.exe event relates to a screen unlock event: Event ID 4624 (access type: 7) (screen unlock) Now I need to find the screen lock event, so I can compare the time between when I ...
0
votes
1answer
110 views

Track RDP user session activity in windows 2003

The users are connected to windows 2003 server remotely through RDP. At times the users remain connected but inactive with their remote desktop session minimized on their desktop machine. How can ...
0
votes
1answer
77 views

Windows 7 - displaying a message if an event occurs

I'd like to get a message when event 7026 occurs. (7026 = driver failed to load) But I can't create a working task for this purpose. Creating a task on the event (In Event Viewer right click on ...
0
votes
1answer
226 views

How can I view events that cause laptop screen to turn on from standby (but not sleep)?

On a Windows 7 laptop, is there a way to see exactly what device or process triggered the screen to turn on? I'm referring to the "screen off" mode where the notebook is still on, but the screen has ...
0
votes
1answer
2k views

System date change tracking in windows xp

I wanted to track when system time was changed in a PC.By looking at event viewer for event id 520 i will get it. But when i changed date manually in windows and look at event viewer i found 4 entries ...
0
votes
1answer
313 views

How Do I Suppress SQL Server “Informational” Messages?

I've just installed SQL Server 2008 R2 Express for local development, and it's flooding the Application Event Log with a seemingly endless barrage of trivia and drivel ("SQL Server is now ready for ...
0
votes
1answer
649 views

Windows 7 just restarts, no BSOD, shows “Event ID 14 volsnap”

My Windows 7 just restarts without giving me a BSOD. When it reboots, it will hang sometimes and you have to let it rest. Sometimes it will print a message saying that Hal.dll is missing or corrupt. ...
0
votes
1answer
585 views

What is the meaning of this warning in windows administrative events - DNS Client Events

Sometimes I open profile of a user and he has write the address of his site there, but I don't remember when was the last time I clicked that address. But I have some warnings in computer ...
2
votes
0answers
505 views

What is Event ID 33: SpellChecker in Windows 7 and 8 about?

On newly installed Windows machines (Windows 8 Pro, Windows 7) I've seen event id 33 regularly appearing in the event viewer with this message: Failed to add hardcoded change pair "aids -> aids" ...
2
votes
0answers
1k views

Windows freezes at startup & cannot start sptd

Recently right after I enter the Windows password, the computer froze at welcome screen, I then entered Safe Mode to restore system and then everything works fine But today I started computer again ...
1
vote
0answers
519 views

Windows 8 crashing unexpectedly

The computer I use at work sometimes crashes when I'm not near it. The first time it happened the OS crashed dead (even the mouse cursor wasn't moving). At that time I couldn't get much information ...
1
vote
0answers
198 views

Event Viewer snapin fails after a power outage

I was in the middle of opening a saved event log from another computer when our building was hit with a power outage, and my desktop is not protected. After recovering from the power outage, I get an ...
1
vote
0answers
440 views

How can i figure out if & which hardware may be causing a write to a file to take longer than it should?

I saw this message in Event Viewer a couple of times, and I'm not really sure what it means. How can I figure out what is causing this issue and what can I do to resolve it? Log Name: ...
1
vote
0answers
686 views

Why does the printer keep disappearing?

My neighbour has an Epson SX130. All has been fine for a long time, until recently when the printer has regularly started to disappear from his XP machine and is not visible in the printers control ...
1
vote
0answers
741 views

Bat file to change group policy

Based on the answer to this question: Windows XP: is it possible to log startup and shutdown times in the system event log? I want to be able to add it to a batch file, but have no idea how to go ...
1
vote
0answers
143 views

Using syslog to monitor stopped services on Win2k

I am using a central syslog server to capture event logs from Windows machines. I am specifically interested in monitoring Windows services. This works well under XP machines - each time a service ...
0
votes
0answers
18 views

How to check the event log (if any) for network failure?

Suppose, when you leave your computer running while it's connected to internet and after a while if your WiFi modem freezes in the middle, then there would be a "Limited or No Network connectivity" ...
0
votes
0answers
8 views

View multiple Event Viewer logs From USB

I've copied the entire Windows event viewer log folder onto a USB, and I'm trying to view them in an Event Viewer on another PC, but I can only open one log at a time. Is there a way that I can open ...
0
votes
0answers
18 views

How could I see by the event viewer log that the format of date was changed?

I need to see by the eventviewer log that the format of date was changed. I know that have the eventlog of ID 4616, but it's for DATE changing, and not lot when I just change the FORMAT of the date. ...
0
votes
0answers
11 views

How to force Windows Error Events for educational purposes

I'm looking to show some colleagues how to use the Event Viewer in Windows and would like a way create some Error and Warning messages on a demo machine. I know I could throw some dodgy RAM in or ...
0
votes
0answers
12 views

How can I use Xpath in Event Viewer to filter on substrings of the values of attributes?

I am trying to define Windows Eventviewer views using Xpath xml queries. I am able to select on attributes if I match on the entire value; for example [EventData[Data[@Name="Image"] and ...
0
votes
0answers
15 views

Two or more IDs in event viewer with filter on Windows XP

Is there a way to filter 2 or more ID events. In win 7 you can use ","(e.g. 6006,6005). On the other side in XP I can't use comma to separate IDs, "unexpected input" or error like that is popping up ...
0
votes
0answers
62 views

Windows 2012 Server - Audit Who Logged User Off

Is there a way to tell who logged a user off with Windows 2012 Server? For example, I use rdp to log into a box that as multiple admins, there are some scripts that run under a specific user. The ...
0
votes
0answers
20 views

How do I run or quit a program at a certain time with Event Viewer?

I'm using the program Tunebite to convert songs. I need to convert a lot of songs and then quit the program after all processing is complete. There's an option to shutdown after completion but not to ...
0
votes
0answers
141 views

How To Read NFC event?

I have an external NFC reader connected via usb to a Windows-7, with the drivers installed. It seems to work, as when I place a NFC card on the reader its led changes from red to green and the PC ...
0
votes
0answers
27 views

managing event viewer remotely in windows 2003

Same user is configured as administrator on all the servers in one domain at windows 2003 server. However, the account is not the domain admin. Can security logs be managed or cleared remotely from ...
0
votes
0answers
196 views

Skype 7.1 crashes at startup on Windows Enterprise

I downloaded the latest skype on my workstation, which is a Windows 7 Enterprise (Version 6.1, Build 7601: SP1). The problem is that it crashes every single time on Skype startup. I can't even write ...
0
votes
0answers
50 views

stopping of event-viewer services, and performing malacious activities

what will happen if i shutdown the windows event log services. I know it will stop event viewer. My question is will this activity be logged somewhere. if yes, then where?. and where will be the ...
0
votes
0answers
1k views

Tracking who deleted a folder in Windows Server

Recently there are several cases of missing or deleted files/folder from various shared folders, so we have turned on the audit policy for Delete Subfolders and Files. However there are more than 100 ...
0
votes
0answers
135 views

Event Viewer is not opening

When I double click into Event Viewer in Control Panel, nothing happens. Computer management does not open too. No any error messages displayed. If I run eventvwr from command line, also nothing ...
0
votes
0answers
43 views

Kiosk Machine Usage (Win 7)

We have kiosk machines at our company that are primarily used by staff to remote desktop to their actual machine. I am looking for away to determine how often they were used in the past few months. ...
0
votes
0answers
372 views

Windows server 2008 R2 Application error, and site is getting slow down

Im using windows server 2008 R2 and recently my site become very slow and when I checked the event viewer and found an error logged, following is the details of the error Faulting application name: ...
0
votes
0answers
125 views

BSOD With Audio

I'm keep getting a BSOD, and if there's any audio playing, a loud pulsating sound comes out of the speakers (during the BSOD). I think it's probably like last half a second or so of the audio that I ...
0
votes
0answers
1k views

Getting a System.IO.FileNotFoundException when launching an .exe

When I try to start a .exe I'm just getting the "The program has stopped to work" dialog (I have the computer in Italian so I do not know the English localized name). When I see the event viewer for ...
0
votes
0answers
330 views

System Log Event Viewer will not display

Am trying to view the System Event Log on someones laptop that is misbehaving. botted in safe mode, load event viewer and click on system and it tells me "Data is invalid (13)". Tried clearing the ...