|
W2kEventLogReport |
Index:
|
|
Start the program
Customize the program: Setup.ini
Servers.ini ExcludedEvents-*.ini
Installation of license
|
|
1.
Please choose to
install the program on your servers hard disk (not a
client-computer). 2.
Invoke Explorer 3.
Make a folder on
drive C: ex. C:\Download 4.
Invoke your browser,
ex. Microsoft Internet Explorer 5.
Choose http://www.TryWare.dk/English/Download/W2kEventLogReport/Setup.exe 6.
Choose Save as 7.
Choose the folder
from Explorer according to step 3 above, and press ENTER. 8.
Choose Explorer 9.
Choose the folder
according to step 3 above 10.
Double-click
Setup.exe 11.
Press ENTER to
installation message 12.
Input X to Your
wishes, and press ENTER. |
Customize
the program:
|
Setup.ini |
|
|
Invoke Explorer Choose the folder C:\TryWareDk\W2kEventLogReport Double-click Setup.ini (or open it with Notepad.exe) Change the settings to your wishes, according to the syntax described
in Setup.txt |
||
|
Application=Enable System=Enable DirectoryService=Enable DnsServer=Enable FileReplService=Enable |
|
|
|
Disable decreases processing time |
||
|
BackupEventLogs=Disable |
|
|
|
Do you want a backup of your eventlogs? %systemroot%\system32\config\Backup |
||
|
ExcludedEvents=Enable |
|
|
|
If enabled, you can input EventId=EventSource in the ExcludedEvents-*.ini files about the eventlogs,
you don't want in your intranet-report. Enable increases processing time Disable decreases processing time |
||
|
Error=Enable Warning=Enable Information=Disable AuditSuccess=Disable AuditFailure=Disable |
Syntax: Disable or Enable |
|
|
Which event types do you want in your intranet-report? Disable doesn't decrease processing time |
||
|
AddMoreRAM=Disable |
Syntax: Disable or between
512 - 32760 |
|
|
How much RAM should be initialized for handling duplicate events on
all servers in Servers.ini? 512-32760 increases processing time Disable does not decrease processing time |
||
|
AskForNewFoundServers=Enable |
|
|
|
Do you want to be asked about adding new found servers to Servers.ini? New found servers are always listed in intranet-report |
||
|
CreateScheduledTask=Enable |
|
|
|
Do you want to create a scheduled task to run W2kEventLogReport.exe on
a scheduled time each day? Domain administrators name should be preceded with DomainName\ |
||
|
EventIdNet=Disable |
Syntax: Disable or LicenseNumber |
|
|
Insert your EventId.Net access license
if you purchased one Read more on http://www.eventid.net/3rdparty.asp |
||
|
RunSilent=Disable |
Syntax: Disable or Enable |
|
|
Do you want W2kEventLogReport to run silent? |
||
|
IntranetPath=Disable |
Syntax: Disable or http://YourIntranetServer/YourIntranetPath (pointing to same UNC-path as W2kEventlogReport.exe) |
|
|
Do you want the links on index-intranet-report as http:// or UNC (\\servername) Using Disable will produce UNC-paths |
||
|
OnlyCreateIndexHtml=Disable |
Syntax: Disable or Enable |
|
|
If the index-intranet-file is corrupted by runtime-errors, you can
recreate the index-intranet-file If Enabled it doesn't create intranet-reportfile.
It only creates a new intranet-indexfile according
to the intranet-reportfiles created earlier. Setup.ini is automatically reset to Disabled |
||
|
[HtmlIndexFile] |
Syntax: Disable or Enable |
|
|
Do you want your index-intranet-file to show all the old links to your
intranet-reports in the year subfolders, or only the last one? |
||
|
HtmlForEachComputer=Disable |
Syntax: Disable or Enable |
|
|
Do you want one intranet-report for all servers or one intranet-report
for each server? |
||
|
ReCreateAllEvents=Disable |
Syntax: Disable or Enable |
|
|
Do you want to recreate all events without notice of the last collect
time? If Enabled then lastcollecttime is ignored. If Disabled the intranet-reportfile only
show the events since last run |
||
|
HelpDeskEmail=Disable |
Syntax: Disable or fully
qualified email-address for your supportpartner/helpdesk
like YourHelpDeskEmailAddress@TheirDomainName.com |
|
|
Do you want a link in your intranet-report for quick
help-request-email to your supportpartner/helpdesk? Disable doesn't decrease processing time If enabled use your mouse on eventtype (error/warning/information) to produce an email |
||
|
EmailHost=192.168.1.1 |
|
|
|
Do you want an email each time the intranet-report is produced? |
||
|
|
Syntax: Input your email
account on your emailserver or your SMTP/POP3 accountname or input nothing |
|
|
Only used if EmailHost<>Disable If so, EmailUserName is necessary |
||
|
|
Syntax: Input password for
the EmailUserName, or input nothing |
|
|
Only used if EmailHost<>Disable Not necessary with Outlook 2000/2003 on Exchange 2000/2003 |
||
|
EmailFromAddress=W2kEventLogReport |
Syntax: Input fully
qualified email-address for EmailUserName, or input
W2kEventLogReport |
|
|
Only used if EmailHost<>Disable |
||
|
EmailToList=Admin@TryWare.Dk;Support@TryWare.Dk |
Syntax: Input fully
qualified email-address for receiver with a ; as separator if more than one |
|
|
Only used if EmailHost<>Disable |
||
|
|
Syntax: Input fully
qualified email-address for carbon copy receiver with a ; as separator if more
than one, or input nothing |
|
|
Only used if EmailHost<>Disable |
||
Customize the program:
|
Servers.ini |
|
|
Invoke Explorer Choose the folder C:\TryWareDk\W2kEventLogReport Double-click Servers.ini (or open it with Notepad.exe) Change the settings to your wishes |
||
|
SERVER1 SERVER2 SERVER3 SERVER4 SERVER5 |
Input the server names without \\ in front |
|
Customize the program:
|
ExcludedEvents-*.ini |
|
|
Invoke Explorer Choose the folder C:\TryWareDk\W2kEventLogReport Double-click the wanted ExcludedEvents-*.ini (or open it with Notepad.exe) Change the settings to your wishes, according to the syntax described |
||
|
[Information] [Warning] EventID=EventSource [Error] |
Below the wanted EventType input the EventID-number and a = and the EventSource-description
of the events, you don't want to be listed in the intranet-reportfile. |
|
:o) Your brain is like a parachute. It works best when
it's open
w2k local admin group windows 2000 permissions
local admin group W2k: Your colleague's got total power of
Your pc from his own computer on Your corporate Network: Read TryWareDk's Website - Microsoft Windows 2000 HTML Securityhole Member Local Administrators Group Hotfix Admin Admins Administrator
Groups Members Security Office program programs software freeware shareware
Outlook Distributionsliste Email Adressbook
Adressebog Mandatberegning
event eventlog intranet event-id event-source applications system
security error warning information