Windows Event Viewer is a utility that shows users logs of events generated by the Windows operating system, and applications/services running on Windows.

learn more… | top users | synonyms

2
votes
2answers
5k views

Can't Open Up Event Viewer

I just installed a large backlog of Windows Updates (I have Windows 7 Ultimate 64-bit) and now a handful of programs are acting strangely (not opening, crashing, etc) I went to try to diagnose the ...
0
votes
2answers
46 views

Where Does One Find Logs of Pentesting Tools on Windows

I'm scanning my Windows 8 machine with Nmap and OpenVAS (from a different machine on my LAN and another one over WAN) and I'm looking for logs for the occurrence of such events in the Event Viewer but ...
0
votes
2answers
378 views

How Do I Suppress SQL Server “Informational” Messages?

I've just installed SQL Server 2008 R2 Express for local development, and it's flooding the Application Event Log with a seemingly endless barrage of trivia and drivel ("SQL Server is now ready for ...
2
votes
1answer
144 views

Windows 7 (Home Premium): eventvwr.exe: How to log workstation locking and unlocking and screensaver invoked and dismissed events

I have found the following information pertaining to when a user starts and stops interacting with a Windows 7 Home Premium 64-bit PC. Theoretically, these events can be viewed in eventvwr.exe when ...
1
vote
1answer
2k views

How to solve Windows 7 regular hangs after fresh install. Some diagnosis done but can't pin down

I am getting regular hangs on my windows 7 machine imedietly after installation and after updating drivers. The machine is a Dell XPS 15 (L521x). It happens approximately once every few minutes. ...
1
vote
1answer
2k views

Internet access status, windows 7 event viewer

I have a pc working 24/7 and the internet connection disconnect and reconnect several times in the day, and I would like to know log history of the internet status logged by this pc, is it possible ...
0
votes
1answer
34 views

Modifying script to capture login/shutdown times in Windows

For some time now I've been using this script to view my login time for a particular computer: Set objFSO = CreateObject("Scripting.FileSystemObject") Set objFile = objFSO.GetFile("C:\Windows\...
0
votes
1answer
26 views

How can I use Xpath in Event Viewer to filter on substrings of the values of attributes?

I am trying to define Windows Eventviewer views using Xpath xml queries. I am able to select on attributes if I match on the entire value; for example [EventData[Data[@Name="Image"] and (Data="C:\...
0
votes
1answer
508 views

Windows 7: What is the event ID for a lock event and how to tell if it is user-initiated or not?

The following eventvwr.exe event relates to a screen unlock event: Event ID 4624 (access type: 7) (screen unlock) Now I need to find the screen lock event, so I can compare the time between when I ...
0
votes
1answer
169 views

Track RDP user session activity in windows 2003

The users are connected to windows 2003 server remotely through RDP. At times the users remain connected but inactive with their remote desktop session minimized on their desktop machine. How can ...
0
votes
1answer
95 views

Windows 7 - displaying a message if an event occurs

I'd like to get a message when event 7026 occurs. (7026 = driver failed to load) But I can't create a working task for this purpose. Creating a task on the event (In Event Viewer right click on ...
0
votes
1answer
255 views

How can I view events that cause laptop screen to turn on from standby (but not sleep)?

On a Windows 7 laptop, is there a way to see exactly what device or process triggered the screen to turn on? I'm referring to the "screen off" mode where the notebook is still on, but the screen has ...
0
votes
1answer
3k views

System date change tracking in windows xp

I wanted to track when system time was changed in a PC.By looking at event viewer for event id 520 i will get it. But when i changed date manually in windows and look at event viewer i found 4 entries ...
0
votes
1answer
672 views

Windows 7 just restarts, no BSOD, shows “Event ID 14 volsnap”

My Windows 7 just restarts without giving me a BSOD. When it reboots, it will hang sometimes and you have to let it rest. Sometimes it will print a message saying that Hal.dll is missing or corrupt. ...
0
votes
1answer
604 views

What is the meaning of this warning in windows administrative events - DNS Client Events

Sometimes I open profile of a user and he has write the address of his site there, but I don't remember when was the last time I clicked that address. But I have some warnings in computer management\...
2
votes
0answers
520 views

What is Event ID 33: SpellChecker in Windows 7 and 8 about?

On newly installed Windows machines (Windows 8 Pro, Windows 7) I've seen event id 33 regularly appearing in the event viewer with this message: Failed to add hardcoded change pair "aids -> aids" ...
2
votes
0answers
1k views

Windows freezes at startup & cannot start sptd

Recently right after I enter the Windows password, the computer froze at welcome screen, I then entered Safe Mode to restore system and then everything works fine But today I started computer again ...
1
vote
0answers
30 views

What is the source of Printer Status Events in Windows 10?

While looking at Event Viewer, if I send a file to Print, I can see various entries in the logs regarding spooling and cancelled jobs - all located in: Microsoft->Windows->PrintSystems But if ...
1
vote
0answers
596 views

Windows 8 crashing unexpectedly

The computer I use at work sometimes crashes when I'm not near it. The first time it happened the OS crashed dead (even the mouse cursor wasn't moving). At that time I couldn't get much information ...
1
vote
0answers
233 views

Event Viewer snapin fails after a power outage

I was in the middle of opening a saved event log from another computer when our building was hit with a power outage, and my desktop is not protected. After recovering from the power outage, I get an ...
1
vote
0answers
543 views

How can i figure out if & which hardware may be causing a write to a file to take longer than it should?

I saw this message in Event Viewer a couple of times, and I'm not really sure what it means. How can I figure out what is causing this issue and what can I do to resolve it? Log Name: ...
1
vote
0answers
714 views

Why does the printer keep disappearing?

My neighbour has an Epson SX130. All has been fine for a long time, until recently when the printer has regularly started to disappear from his XP machine and is not visible in the printers control ...
1
vote
0answers
784 views

Bat file to change group policy

Based on the answer to this question: Windows XP: is it possible to log startup and shutdown times in the system event log? I want to be able to add it to a batch file, but have no idea how to go ...
1
vote
0answers
144 views

Using syslog to monitor stopped services on Win2k

I am using a central syslog server to capture event logs from Windows machines. I am specifically interested in monitoring Windows services. This works well under XP machines - each time a service ...
0
votes
0answers
5 views

Audit Power Settings change

I helped with a machine that was stopping whilst running many samples in automatic mode. We found that it was because the machine was going to sleep during production. The settings should be never for ...
0
votes
0answers
49 views

Solving Windows 10 “Activation permission for the COM Server application”

On a clean genuine Windows 10 installation, the Event Viewer throws one of these errors every 2-5 minutes: The application-specific permission settings do not grant Local Activation permission ...
0
votes
0answers
30 views

XML Xpath for Windows event?

I'm trying to create an event filter based on the following event XML (an example), but I seemed to be missing something: <?xml version="1.0" encoding="utf-8" standalone="yes"?> <Events>&...
0
votes
0answers
13 views

How to start Windows Event Viewer in Application node filtered for a specific provider?

My goal is to start Windows Event Viewer from a command line, with the Application node already selected, showing only entries for my specific application, or provider? In other words, I need to ...
0
votes
0answers
18 views

View multiple Event Viewer logs From USB

I've copied the entire Windows event viewer log folder onto a USB, and I'm trying to view them in an Event Viewer on another PC, but I can only open one log at a time. Is there a way that I can open ...
0
votes
0answers
25 views

How could I see by the event viewer log that the format of date was changed?

I need to see by the eventviewer log that the format of date was changed. I know that have the eventlog of ID 4616, but it's for DATE changing, and not lot when I just change the FORMAT of the date. ...
0
votes
0answers
40 views

How to force Windows Error Events for educational purposes

I'm looking to show some colleagues how to use the Event Viewer in Windows and would like a way create some Error and Warning messages on a demo machine. I know I could throw some dodgy RAM in or ...
0
votes
0answers
17 views

Two or more IDs in event viewer with filter on Windows XP

Is there a way to filter 2 or more ID events. In win 7 you can use ","(e.g. 6006,6005). On the other side in XP I can't use comma to separate IDs, "unexpected input" or error like that is popping up ...
0
votes
0answers
105 views

Windows 2012 Server - Audit Who Logged User Off

Is there a way to tell who logged a user off with Windows 2012 Server? For example, I use rdp to log into a box that as multiple admins, there are some scripts that run under a specific user. The ...
0
votes
0answers
23 views

How do I run or quit a program at a certain time with Event Viewer?

I'm using the program Tunebite to convert songs. I need to convert a lot of songs and then quit the program after all processing is complete. There's an option to shutdown after completion but not to ...
0
votes
0answers
224 views

How To Read NFC event?

I have an external NFC reader connected via usb to a Windows-7, with the drivers installed. It seems to work, as when I place a NFC card on the reader its led changes from red to green and the PC ...
0
votes
0answers
50 views

stopping of event-viewer services, and performing malacious activities

what will happen if i shutdown the windows event log services. I know it will stop event viewer. My question is will this activity be logged somewhere. if yes, then where?. and where will be the ...
0
votes
0answers
2k views

Tracking who deleted a folder in Windows Server

Recently there are several cases of missing or deleted files/folder from various shared folders, so we have turned on the audit policy for Delete Subfolders and Files. However there are more than 100 ...
0
votes
0answers
160 views

Event Viewer is not opening

When I double click into Event Viewer in Control Panel, nothing happens. Computer management does not open too. No any error messages displayed. If I run eventvwr from command line, also nothing ...
0
votes
0answers
44 views

Kiosk Machine Usage (Win 7)

We have kiosk machines at our company that are primarily used by staff to remote desktop to their actual machine. I am looking for away to determine how often they were used in the past few months. ...
0
votes
0answers
399 views

Windows server 2008 R2 Application error, and site is getting slow down

Im using windows server 2008 R2 and recently my site become very slow and when I checked the event viewer and found an error logged, following is the details of the error Faulting application name: ...
0
votes
0answers
126 views

BSOD With Audio

I'm keep getting a BSOD, and if there's any audio playing, a loud pulsating sound comes out of the speakers (during the BSOD). I think it's probably like last half a second or so of the audio that I ...
0
votes
0answers
1k views

Getting a System.IO.FileNotFoundException when launching an .exe

When I try to start a .exe I'm just getting the "The program has stopped to work" dialog (I have the computer in Italian so I do not know the English localized name). When I see the event viewer for ...
0
votes
0answers
334 views

System Log Event Viewer will not display

Am trying to view the System Event Log on someones laptop that is misbehaving. botted in safe mode, load event viewer and click on system and it tells me "Data is invalid (13)". Tried clearing the ...