Finding Results for Error Checking

  • Thread starter Thread starter Whit
  • Start date Start date
W

Whit

Hi - I'm running WXP-Pro, with FAT32 file system. Once a week or so, I
usually run the error checking routine on my hard drive, with both options
checked. After rebooting and allowing the error checking routine to
complete, I then go to Event Viewer to read the results. The last two times,
Windows started up fine after the routine, but there was no item in the
event viewer that corresponded to the error checking run, although there is
the usual long laundry list of other entries. I ran it yesterday, then
checked Event Viewer again this am, but nothing there. I'm worried...... any
thoughts on why and what that means and any other way to find the results?
Thanks for your help.
Whit
 
Whit;

For a peek at the Error Checking log.
Start | Run | Type: eventvwr | OK
Look in Application | Listed as Information
under Winlogon, Event 1001
 
Hi Wes -

Thanks for your response. The problem is that I'm not getting any winlogon
entries. I sorted by the "source" column just to make sure I wasn't
overlooking it, but they're not there. What now?? Thanks,
Whit
 
Whit;

Start | Run | Type: eventvwr | OK |
Right click Applications | Properties |
Filter tab | Under Event types |
Are all the s checked?
 
Hi Wes - Thanks for hangin' with me..... Yep, all 5 are checked. I'm
treading on unknown territory here, but I noticed there are no entries under
"Applications" since 3/12/04. Do more recent events automatically replace
older events? Is there any risk to "clearing all events" and trying again?
Thanks,
Whit
 
Whit;

I clear all events in the Event Viewer every day.
When prompted to save; Just say no.

Start | Run | Type: eventvwr | OK |
Right click Applications | Properties |
General tab | Look under Log size |
Overwrite ????
Maybe you might want to click the Restore Defaults button

Filter tab | Event source: ALL |
Category: ALL
 
Whit;

Maybe the Security Policy is set wrong.
Open Local Security Policy
Start | Run | Type: secpol.msc | OK

Navigate to:
Local Computer Policy\Computer Configuration\Windows Settings\Security
Settings\Local Policies\Audit Policy\
And look in the right hand pane for Audit logon events and Audit system
events.

What are they set at? Double click to change.
Sucess
Failure
No checks = No auditing
==============

This may be of some interest to you (it was to me).
HOW TO: Use the Group Policy Editor to Manage Local Computer Policy in
Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;307882&Product=winxp
 
Hey Wes - If you're still out there, thanks for your help and patience. I
cleared the log and ran error checking again, and everything showed up fine.
Also, Properties were set to overwrite entries after 7 days. I reset to
"overwrite as needed". If I'm interpreting that correctly, I assume the log
was filling up prior to 7 days and thus was not showing the latest entries
(?) Thanks again,
Whit
 
Back
Top