Where are Events Stored in Windows Server 2003

Hello Fellas
I have a Windows Server 2003 for Small business. Last week the system cracked and I could find a way to set it back. I tried repairing and reinstalling but it didn't work. I think it could be a Disk failure.

In order to start it again, I set another hard disk and installed Server 2003. Then i connected the old hard disk to extract the information and now everything seems to work just fine.

How ever, I'd really need to know what the failure was. I would like to access the event viewer but i don't know how to do it. Is it stored somewhere?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hi ojgarciah,

To see events from the system or applications

1. Click the Start Menu
2. Click Administrative Tools
3. Click Event Viewer

You will probably see four categories, although you may see more.

Application: This stores events that are not operating system specific. Applications you have installed on your machine write events to this store.

System: This stores events from the SYSTEM account and operating system.

Security: This stores events such as logins and system shut downs.

If you double click on an event a window will open with details about the event including the date, time, user, computer, source, etc. It may also have a link to help documentation.

Good luck

It just occurred to me that you might want to get the event information from the old hard disk. You could try using this command to script out the events to a text file:

CSCRIPT d:\Windows\System32\eventquery.vbs

Here are some resources that talk about this

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ojgarciahAuthor Commented:

I guess I didn't explain correctly. I can actually consult event viewer in the current OS, my issue is i need to check the Events on the non running OS Hard Disk.

Thanks for your comments.
In the above comment, change the drive letter as appropriate to the old hard drive. It should be able to read the event log from that source.

So if the old disk letter is D, Run the command "CSCRIPT D:\Windows\System32\eventquery.vbs" at the command prompt. Let me know if that doesn't work.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.