16,755 pts.
 Retrieving event logs to the domain controller
I have a Windows Server 2003 Domain Controller and some XP computers on the domain. I would like to retrieve the event logs to the domain controller. Is there an easy and secure way to do this?

Software/Hardware used:
ASKED: June 2, 2011  8:14 PM
UPDATED: June 3, 2011  7:08 AM

Answer Wiki:
If you log onto the domain controller, you should be able to open the event viewer and on then click on the spot on the left that says "Event Viewer (local)" and choose "Connect to another computer". It is easiest to do this as a domain admin.
Last Wiki Answer Submitted:  June 2, 2011  8:54 pm  by  Mattcassell   730 pts.
All Answer Wiki Contributors:  Mattcassell   730 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

You want to retrieve the event logs from the winXP computers to the DC? Either way you could use the Microsoft Management Console

open your “RUN” cmdlet type “MMC”
navigate to File Menu
open Add/Remove Snap In
in the “add remove snap ins dialog box select
Event Viewer (in available snap ins)
add to (Select snap ins) field
Choose (other computer radio button)
type computer name or select browse and type computer name and “check name” of computer in domain (in Select computer dialog box)
if you’re not using an administrative account on your local computer select “connect as another user” choosing an administrative domain account
enter user name and password
click ok
the computer will appear in the “selected computers” field click ok
and the eventvwr will be available in the console root of the details pane

repeat this step for all computers you want to monitor event views then save the MMC and place a short cut on your start menu to easily access this.
Ensure you rename the short cut to something like “Domain PC Event Viewer” or “DoPCMon” or “DoMEV” (DOmain Machines Event Viewer) but don’t get too wild with the acrynoms…
Regards
NMM

 900 pts.