Windows 2000 Administration in a Nutshell

Name

Event Viewer — H,PP

Synopsis

Monitors event logs on local and remote computers.

Description

Event Viewer shows events recorded in the Application, Security, and System logs. These logs provide administrators with crucial information concerning component failures, invalid logon attempts, application errors, and other problems that may occur.

For administrators familiar with Windows NT 4.0 Server, Event Viewer performs similar functions to those provided by the NT administrative tool of the same name.

Using Event Viewer

You can access Event Viewer by:

• Start → Programs → Administrative Tools → Event Viewer

• Start → Programs → Administrative Tools → Computer Management → System Tools → Event Viewer

• Installing the Event Viewer snap-in into a new or existing console

The console tree for this tool typically looks like this:

Event Viewer Application Log Security Log System Log Directory Service DNS Server File Replication Service

The first three logs are present on all Windows 2000 computers. As for the remaining three:

• Directory Service is only on domain controllers (see domain controller).

• DNS Server is only on servers that have the DNS Server service installed (see DNS ).

• File Replication Service is only on servers that have Dfs configured (see Dfs ).

For more information see event logs.

Action Menu

Under the Action menu, you can select the following:

Root node

Select this to connect to a remote computer whose event logs you want to monitor or to open an archived event log file.

Particular log