To continue reading for free, register below or login
To read more you must become a member of SearchWindowsServer.com
The granularity of the policy for logging of events does not permit the exclusion of the machine accounts. However, if you are using a scripted solution for archiving, or are willing to use such a solution you can filter the events from the logs when they are archived. The VBScript along with WMI can be utilized to pull information from event logs of multiple machines and centrally store the information. If you use this process in conjunction with an appropriate Group Policy governing size and how the information is cleared from event logs -- you can effectively store the logs after filtering unnecessary information. The logs can then be stored for long durations, backed up to tape, and reviewed at will.
Paul Hinsberg
Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.
|
