I
ia1234
Flightless Bird
Dear All,
Is there a standard configuration/policy file in Windows XP that determines
which events are written in the event logs (be it application log, security
log, system log), and which events wont be written to these logs. Like a
policy file determing which you wuill find and which you wont? If so where is
its location? I have used event viewing tools before to determine if someone
printed a document, cant remember event ID of top of my head but on some
machines this is stored, in the event logs, on others it is not, so to save
me some time in analysis if there is an event policy file I could do with
knowing about it.
Is there a standard configuration/policy file in Windows XP that determines
which events are written in the event logs (be it application log, security
log, system log), and which events wont be written to these logs. Like a
policy file determing which you wuill find and which you wont? If so where is
its location? I have used event viewing tools before to determine if someone
printed a document, cant remember event ID of top of my head but on some
machines this is stored, in the event logs, on others it is not, so to save
me some time in analysis if there is an event policy file I could do with
knowing about it.