|
| If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|||||||
|
|
Thread Tools | Display Modes |
|
#1
September 2nd 09, 12:07 PM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
Copying the SecEvent.Evt file
Can anyone tell me how to copy a SecEvent.evt file
(C\Windows\system32-config\) to another location so I can view it using Event Manager. When I perform a typical copy and paste and I view the file using Event Manager the file is always corrupt. A million thanks Johnny Mac 
|
| Ads |
|
#2
September 2nd 09, 04:20 PM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
|
Copying the SecEvent.Evt file
You can save the file to another location from within the Event Viewer.
John Johnny Mac wrote: Can anyone tell me how to copy a SecEvent.evt file (C\Windows\system32-config\) to another location so I can view it using Event Manager. When I perform a typical copy and paste and I view the file using Event Manager the file is always corrupt. A million thanks Johnny Mac
|
|
#3
September 2nd 09, 05:31 PM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
|
Copying the SecEvent.Evt file
I am trying to automate the copy or move processes of the SecEvent.Evt file,
using a logoff script or personally created bat file. Using Event Viewer requires a human to be behind the mose/keyboard and is more of a manual processes which I am trying to avoid. I know the main problem is the SecEvent.Evt file is a active file (constantly in use by the OS since it is being writtent too) and requires applications (Like Event Viewer) to review or move the file. In this case application (Like Event Viewer) is more like a proxy which supports the request versus a traditional "copy / paste" of a file. Any additional ideas? Thanks Johnny Mac "John John - MVP" wrote: You can save the file to another location from within the Event Viewer. John Johnny Mac wrote: Can anyone tell me how to copy a SecEvent.evt file (C\Windows\system32-config\) to another location so I can view it using Event Manager. When I perform a typical copy and paste and I view the file using Event Manager the file is always corrupt. A million thanks Johnny Mac
|
|
#4
September 2nd 09, 06:29 PM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
|
Copying the SecEvent.Evt file
The guys in the scripting groups should be able to give you a WMI script
to do this. Or this should do the trick for you: http://technet.microsoft.com/en-us/s.../bb897544.aspx PsLogList John Johnny Mac wrote: I am trying to automate the copy or move processes of the SecEvent.Evt file, using a logoff script or personally created bat file. Using Event Viewer requires a human to be behind the mose/keyboard and is more of a manual processes which I am trying to avoid. I know the main problem is the SecEvent.Evt file is a active file (constantly in use by the OS since it is being writtent too) and requires applications (Like Event Viewer) to review or move the file. In this case application (Like Event Viewer) is more like a proxy which supports the request versus a traditional "copy / paste" of a file. Any additional ideas? Thanks Johnny Mac "John John - MVP" wrote: You can save the file to another location from within the Event Viewer. John Johnny Mac wrote: Can anyone tell me how to copy a SecEvent.evt file (C\Windows\system32-config\) to another location so I can view it using Event Manager. When I perform a typical copy and paste and I view the file using Event Manager the file is always corrupt. A million thanks Johnny Mac
|
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
