W2kEventLogReport
Daily control on intranetsite with latest eventlogs without duplicates
Step by step
Document updated januar 25, 2006


Back    www.TryWare.Dk

 Index:

 

Download and installation

Start the program

Customize the program: Setup.ini Servers.ini ExcludedEvents-*.ini

Installation of license

 

 

 

Download and installation:

 

1.            Please choose to install the program on your servers hard disk (not a client-computer).

2.            Invoke Explorer

3.            Make a folder on drive C: ex. C:\Download

4.            Invoke your browser, ex. Microsoft Internet Explorer

5.            Choose http://www.TryWare.dk/English/Download/W2kEventLogReport/Setup.exe

6.            Choose Save as

7.            Choose the folder from Explorer according to step 3 above, and press ENTER.

8.            Choose Explorer

9.            Choose the folder according to step 3 above

10.        Double-click Setup.exe

11.        Press ENTER to installation message

12.        Input X to Your wishes, and press ENTER.

 

 

 

Start the program:

 

 

1.           Invoke Explorer

2.           Choose the folder C:\TryWareDk\W2kEventLogReport

3.          Double-click W2kEventLogMenu.exe

4.           Customize Setup.ini files

5.           Start W2kEventLogMenu.exe

6.           Choose Free trial (unless You purchased a license)

 

 

 

Customize the program:

Setup.ini

 

Invoke Explorer

Choose the folder C:\TryWareDk\W2kEventLogReport

Double-click Setup.ini (or open it with Notepad.exe)

Change the settings to your wishes, according to the syntax described in Setup.txt

  orů

Use W2kEventLogMenu.exe to do the same stuff.


[EventLog]

Application=Enable
Security=Enable

System=Enable

DirectoryService=Enable

DnsServer=Enable

FileReplService=Enable


Syntax: Disable or Enable

 


Which types of eventlogs do you want in your intranet-report?

Enable increases processing time

Disable decreases processing time

 


[EventLog]

BackupEventLogs=Disable
 


Syntax: Disable or between 512 - 32760

 

 

Do you want a backup of your eventlogs? %systemroot%\system32\config\Backup

If so, input the max. size of your *.evt files in
%systemroot%\system32\config

 


[EventLog]

ExcludedEvents=Enable
 


Syntax: Disable or Enable

 

 

If enabled, you can input EventId=EventSource in the ExcludedEvents-*.ini files about the eventlogs, you don't want in your intranet-report.

 

Enable increases processing time

Disable decreases processing time

 

 

[EventType]

Error=Enable

Warning=Enable

Information=Disable

AuditSuccess=Disable

AuditFailure=Disable

 

 

Syntax: Disable or Enable

 

 

Which event types do you want in your intranet-report?

 

Disable doesn't decrease processing time

 

 

[RunParams]

AddMoreRAM=Disable

 

 

Syntax: Disable or between 512 - 32760

 

 

How much RAM should be initialized for handling duplicate events on all servers in Servers.ini?

512-32760 increases processing time

Disable does not decrease processing time

 

 

[RunParams]

AskForNewFoundServers=Enable

 


Syntax: Disable or Enable

 

 

Do you want to be asked about adding new found servers to Servers.ini?

If RunSilent=Disable you will not be asked

 

New found servers are always listed in intranet-report

 

 

[RunParams]

CreateScheduledTask=Enable

 


Syntax: Disable or Enable

 

 

Do you want to create a scheduled task to run W2kEventLogReport.exe on a scheduled time each day?

Remember to add the domain administrators name and password in Scheduled tasks MMC.

 

Domain administrators name should be preceded with DomainName\

 

 

[RunParams]

EventIdNet=Disable

 

 

Syntax: Disable or LicenseNumber

 

 

Insert your EventId.Net access license if you purchased one

 

Read more on http://www.eventid.net/3rdparty.asp

 

 

[RunParams]

RunSilent=Disable

 

Syntax: Disable or Enable

 

 

Do you want W2kEventLogReport to run silent?

If enabled, you can find runtime-errors in @ERROR-W2kEventLogReport.log or @WARNING-W2kEventLogReport.log

 

 

[HtmlIndexFile]

IntranetPath=Disable

 

 

Syntax: Disable or http://YourIntranetServer/YourIntranetPath

(pointing to same UNC-path as W2kEventlogReport.exe)

 

 

Do you want the links on index-intranet-report as http:// or UNC (\\servername)

Using Enable will produce http:// urls

Using Disable will produce UNC-paths

 

 

[HtmlIndexFile]

OnlyCreateIndexHtml=Disable

 

 

Syntax: Disable or Enable

 

 

If the index-intranet-file is corrupted by runtime-errors, you can recreate the index-intranet-file

 

If Enabled it doesn't create intranet-reportfile. It only creates a new intranet-indexfile according to the intranet-reportfiles created earlier.

 

Setup.ini is automatically reset to Disabled

 

 

[HtmlIndexFile]

ShowOldHtmlLinks=Enable

 

 

Syntax: Disable or Enable

 

 

Do you want your index-intranet-file to show all the old links to your intranet-reports in the year subfolders, or only the last one?

 

 

[HtmlReportFile]

HtmlForEachComputer=Disable

 

 

Syntax: Disable or Enable

 

 

Do you want one intranet-report for all servers or one intranet-report for each server?

 

 

[HtmlReportFile]

ReCreateAllEvents=Disable

 

 

Syntax: Disable or Enable

 

 

Do you want to recreate all events without notice of the last collect time?

 

If Enabled then lastcollecttime is ignored.

If Disabled the intranet-reportfile only show the events since last run

 

 

[HtmlReportFile]

HelpDeskEmail=Disable

 

 

Syntax: Disable or fully qualified email-address for your supportpartner/helpdesk like

YourHelpDeskEmailAddress@TheirDomainName.com

 

 

Do you want a link in your intranet-report for quick help-request-email to your supportpartner/helpdesk?

 

Disable doesn't decrease processing time

 

If enabled use your mouse on eventtype (error/warning/information) to produce an email

 


[Email]

EmailHost=192.168.1.1

 


Syntax: Use the tcp/ip-number of your exchange-server or your Internet-email-provider (ISP), or input Disable

 

 

Do you want an email each time the intranet-report is produced?

 


[Email]

EmailUserName=TryWareDk

 

 

Syntax: Input your email account on your emailserver or your SMTP/POP3 accountname or input nothing

 

 

Only used if EmailHost<>Disable

 

If so, EmailUserName is necessary

 


[Email]

EmailPassword=xyz

 

 

Syntax: Input password for the EmailUserName, or input nothing

 

Only used if EmailHost<>Disable

 

Not necessary with Outlook 2000/2003 on Exchange 2000/2003

 


[Email]

EmailFromAddress=W2kEventLogReport

 

 

Syntax: Input fully qualified email-address for EmailUserName, or input W2kEventLogReport

 

 

Only used if EmailHost<>Disable

 


[Email]

EmailToList=Admin@TryWare.Dk;Support@TryWare.Dk

 

 

Syntax: Input fully qualified email-address for receiver with a ; as separator if more than one

 

 

Only used if EmailHost<>Disable

 


[Email]

EmailToCcList=

 

 

Syntax: Input fully qualified email-address for carbon copy receiver with a ; as separator if more than one, or input nothing

 

 

Only used if EmailHost<>Disable

 

 

 

Customize the program:

Servers.ini 

 

Invoke Explorer

Choose the folder C:\TryWareDk\W2kEventLogReport

Double-click Servers.ini (or open it with Notepad.exe)

Change the settings to your wishes

  orů

Use W2kEventLogMenu.exe to do the same stuff.

 

SERVER1

SERVER2

SERVER3

SERVER4

SERVER5

 

 

Input the server names without \\ in front

 

 

 

Customize the program:

ExcludedEvents-*.ini

 

Invoke Explorer

Choose the folder C:\TryWareDk\W2kEventLogReport

Double-click the wanted ExcludedEvents-*.ini (or open it with Notepad.exe)

Change the settings to your wishes, according to the syntax described

  orů

Use W2kEventLogMenu.exe to do the same stuff.

 

[Information]

 

 

[Warning]

EventID=EventSource

 

[Error]

 

 

Below the wanted EventType input the EventID-number and a =  and the EventSource-description of the events, you don't want to be listed in the intranet-reportfile.

 

 

 

Installation of a license:

 

 

1.      Invoke Explorer

2.      Choose the folder C:\TryWareDk\W2kEventLogReport

3.      Double-click W2kEventLogMenu.exe or W2kEventLogReport.exe

4.      Choose Input License number

5.      Input the license number You got from email, when You purchased the license.

6.      Input the Company name You got from email, when You purchased the license.

7.      Press ENTER

8.      Please wait som minutes when nr. 5 and 6 are controlled.

 




 

:o) Your brain is like a parachute. It works best when it's open

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

w2k local admin group windows 2000 permissions

 

local admin group W2k: Your colleague's got total power of Your pc from his own computer on Your corporate Network: Read TryWareDk's Website - Microsoft Windows 2000 HTML Securityhole Member Local Administrators Group Hotfix Admin Admins Administrator Groups Members Security Office program programs software freeware shareware Outlook Distributionsliste Email Adressbook Adressebog Mandatberegning

event eventlog intranet event-id event-source applications system security  error warning information