Taking Event Log backup in windows 2008

Posted on 2009-12-21
Last Modified: 2013-11-29
Hi there,

I have tried to automate event log backups on windows 2008 server box. No matter what script i write and what tool i use.. it will not take backup of security log. Scripts export other logs without problem ... The issue is because of the required elevation before running administrative commands.... i don't want to disable default behavior of windows security ...

Anyone has idea how to take automatic security log backup on windows 2008?

Question by:aiklamha
    LVL 41

    Expert Comment

    I presume you're using the wevtutil command-line utility inside a scheduled task?
    If so, there is a checkbox for the scheduled task that says "Run with highest privileges".  I'm thinking that would do it
    LVL 12

    Expert Comment

    by:John Griffith
    If wevtutil batch script, RIGHT-click on bat file, "Properties", "Compatibility", check box "Privilege level" - or button for "All users.." below it.  
    LVL 17

    Accepted Solution

    I found the solution, there is a group policy setting in Windows 2008 which allows you to take event log backup. Thanks everyone..  for those who are interested the group policy setting can be found at following location.

    Computer Configuration/Windows Components/Event Log Service

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
    When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
    This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now