D
Daniel Ostrander
Does anybody know of a way to recover deleted entries from
the Event Viewer that were not saved to file?
Thanks
the Event Viewer that were not saved to file?
Thanks
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
R
Richard McCall [MSFT]
Backup or system state? If not then no
G
Guest
Thank you for your response Richard. Please understand
I'm not a "Network Admin" or similar, I'm a CADD operator
trying to be a rudimentary network admin for a small site.
That being said, I'm not sure how you could yank the data
out of a backup since it's not an individual file (is that
correct?), or, I'm assuming your meaning recovering it
from the system state of a backup. It's not a deleted
file, but could it be retrieved using some file recovery
software? Or could it also be retrieved from a blue
screen dump?
I'm not a "Network Admin" or similar, I'm a CADD operator
trying to be a rudimentary network admin for a small site.
That being said, I'm not sure how you could yank the data
out of a backup since it's not an individual file (is that
correct?), or, I'm assuming your meaning recovering it
from the system state of a backup. It's not a deleted
file, but could it be retrieved using some file recovery
software? Or could it also be retrieved from a blue
screen dump?
-----Original Message-----
Backup or system state? If not then no
--
Richard McCall [MSFT]
"This posting is provided "AS IS" with no warranties, and confers no
rights."
Does anybody know of a way to recover deleted entries from
the Event Viewer that were not saved to file?
Thanks
.
R
Richard McCall [MSFT]
Yes if you have a backup the event logs are stored in the system32\config
directory as filename.evt
--
Richard McCall [MSFT]
"This posting is provided "AS IS" with no warranties, and confers no
rights."
directory as filename.evt
--
Richard McCall [MSFT]
"This posting is provided "AS IS" with no warranties, and confers no
rights."
Thank you for your response Richard. Please understand
I'm not a "Network Admin" or similar, I'm a CADD operator
trying to be a rudimentary network admin for a small site.
That being said, I'm not sure how you could yank the data
out of a backup since it's not an individual file (is that
correct?), or, I'm assuming your meaning recovering it
from the system state of a backup. It's not a deleted
file, but could it be retrieved using some file recovery
software? Or could it also be retrieved from a blue
screen dump?
-----Original Message-----
Backup or system state? If not then no
--
Richard McCall [MSFT]
"This posting is provided "AS IS" with no warranties, and confers no
rights."
Does anybody know of a way to recover deleted entries from
the Event Viewer that were not saved to file?
Thanks
.