Re: Windows Event Viewer
- Posted by alanjohnoxley Dec 24, 2009
- 1069 views
I can suggest looking at "pstools" from www.sysinternals.com The author, Mark Russinovich, is now working with Micro$oft. There are many tools inside the sysinternals.zip that allow remote logins, execs, shutdowns, etc. The name "pstools" comes from the first utility, a Windows equivalent of Unix "ps" which lists processes. The specific utility you want is "PsLogList". here is what the help says about it:
PsLogList The Resource Kit comes with a utility, elogdump, that lets you dump the contents of an Event Log on the local or a remote computer. PsLogList is a clone of elogdump except that PsLogList lets you login to remote systems in situations your current set of security credentials would not permit access to the Event Log, and PsLogList retrieves message strings from the computer on which the event log you view resides.
HTH!
