Event Viewer content

  • Thread starter Thread starter Rolando E Creagh, MD FACS
  • Start date Start date
R

Rolando E Creagh, MD FACS

I apologies for my curiosity.
Have several computers with XP-SP2 (some with W2K) and they all show 3
folders at the Event Viewer (Applications, Security and System). They have
also Office 2000, XP and 2003 but only IE6.
In one new laptop, which is the only one that has Office 2007 and IE7, the
event viewer has 7 folders (add Internet Explorer, MS Office diagnostics, MS
Office sessions and windows Power Shell)
Are this extra folders inserted by IE7 and Office 2007 or by another means?
The eventvwr.msc file version is the same.
Thanks for your interest and response
 
Applications, Security and System are normal.

Event Viewer Log Files have .evt extension.

AppEvent.Evt = Application
SecEvent.Evt = Security
SysEvent.Evt = System

%windir%\system32\config\AppEvent.Evt
%windir%\System32\config\SecEvent.Evt
%windir%\system32\config\SysEvent.Evt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
Value Name: File
Data Type: REG_EXPAND_SZ
Value Data: %SystemRoot%\system32\config\AppEvent.Evt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security
Value Name: File
Data Type: REG_EXPAND_SZ
Value Data: %SystemRoot%\System32\config\SecEvent.Evt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System
Value Name: File
Data Type: REG_EXPAND_SZ
Value Data: %SystemRoot%\system32\config\SysEvent.Evt

Internet Explorer added by Windows Internet Explorer 7. Internet Explorer 6
does not add anything.

MS Office diagnostics and MS Office sessions added by MS Office 2007.
Earlier versions do not add anything in the Event Viewer.

Windows PowerShell
http://www.microsoft.com/windowsserver2003/technologies/management/powershell/default.mspx

Windows PowerShell
http://en.wikipedia.org/wiki/Windows_PowerShell

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
My curiosity is overwhelmed and my deduction was correct.
Thanks very much.

Wesley Vogel said:
Applications, Security and System are normal.

Event Viewer Log Files have .evt extension.

AppEvent.Evt = Application
SecEvent.Evt = Security
SysEvent.Evt = System

%windir%\system32\config\AppEvent.Evt
%windir%\System32\config\SecEvent.Evt
%windir%\system32\config\SysEvent.Evt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
Value Name: File
Data Type: REG_EXPAND_SZ
Value Data: %SystemRoot%\system32\config\AppEvent.Evt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security
Value Name: File
Data Type: REG_EXPAND_SZ
Value Data: %SystemRoot%\System32\config\SecEvent.Evt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System
Value Name: File
Data Type: REG_EXPAND_SZ
Value Data: %SystemRoot%\system32\config\SysEvent.Evt

Internet Explorer added by Windows Internet Explorer 7. Internet Explorer
6 does not add anything.

MS Office diagnostics and MS Office sessions added by MS Office 2007.
Earlier versions do not add anything in the Event Viewer.

Windows PowerShell
http://www.microsoft.com/windowsserver2003/technologies/management/powershell/default.mspx

Windows PowerShell
http://en.wikipedia.org/wiki/Windows_PowerShell

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
Click to expand...
 
Back
Top