asked on

Where are Events Stored in Windows Server 2003

Hello Fellas

I have a Windows Server 2003 for Small business. Last week the system cracked and I could find a way to set it back. I tried repairing and reinstalling but it didn't work. I think it could be a Disk failure.

In order to start it again, I set another hard disk and installed Server 2003. Then i connected the old hard disk to extract the information and now everything seems to work just fine.

How ever, I'd really need to know what the failure was. I would like to access the event viewer but i don't know how to do it. Is it stored somewhere?

Thanks

JasonRawlins

Hi ojgarciah,

To see events from the system or applications

1. Click the Start Menu
2. Click Administrative Tools
3. Click Event Viewer

You will probably see four categories, although you may see more.

Application: This stores events that are not operating system specific. Applications you have installed on your machine write events to this store.

System: This stores events from the SYSTEM account and operating system.

Security: This stores events such as logins and system shut downs.

If you double click on an event a window will open with details about the event including the date, time, user, computer, source, etc. It may also have a link to help documentation.

Good luck

ASKER CERTIFIED SOLUTION

JasonRawlins

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ojgarciah

ASKER

JasonRawlins:

I guess I didn't explain correctly. I can actually consult event viewer in the current OS, my issue is i need to check the Events on the non running OS Hard Disk.

Thanks for your comments.

JasonRawlins

In the above comment, change the drive letter as appropriate to the old hard drive. It should be able to read the event log from that source.

So if the old disk letter is D, Run the command "CSCRIPT D:\Windows\System32\eventquery.vbs" at the command prompt. Let me know if that doesn't work.