• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 260
  • Last Modified:

Where are Events Stored in Windows Server 2003

Hello Fellas
I have a Windows Server 2003 for Small business. Last week the system cracked and I could find a way to set it back. I tried repairing and reinstalling but it didn't work. I think it could be a Disk failure.

In order to start it again, I set another hard disk and installed Server 2003. Then i connected the old hard disk to extract the information and now everything seems to work just fine.

How ever, I'd really need to know what the failure was. I would like to access the event viewer but i don't know how to do it. Is it stored somewhere?

  • 3
1 Solution
Hi ojgarciah,

To see events from the system or applications

1. Click the Start Menu
2. Click Administrative Tools
3. Click Event Viewer

You will probably see four categories, although you may see more.

Application: This stores events that are not operating system specific. Applications you have installed on your machine write events to this store.

System: This stores events from the SYSTEM account and operating system.

Security: This stores events such as logins and system shut downs.

If you double click on an event a window will open with details about the event including the date, time, user, computer, source, etc. It may also have a link to help documentation.

Good luck

It just occurred to me that you might want to get the event information from the old hard disk. You could try using this command to script out the events to a text file:

CSCRIPT d:\Windows\System32\eventquery.vbs

Here are some resources that talk about this
ojgarciahAuthor Commented:

I guess I didn't explain correctly. I can actually consult event viewer in the current OS, my issue is i need to check the Events on the non running OS Hard Disk.

Thanks for your comments.
In the above comment, change the drive letter as appropriate to the old hard drive. It should be able to read the event log from that source.

So if the old disk letter is D, Run the command "CSCRIPT D:\Windows\System32\eventquery.vbs" at the command prompt. Let me know if that doesn't work.

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now