Microsoft® Windows® XP Unleashed

Chapter 16. Auditing Windows XP Using the Event Viewer

In This Chapter

• Overview of the Event Viewer

• Setting Options for Log Files

• Archiving a Log File and Clearing Events

• How to Halt the Computer When the Security Log Becomes Full

The Event Viewer is the tool you can use to monitor events recorded by Windows and other applications and to audit actions that users, applications, and the operating system itself perform within Windows XP. Windows XP Professional keeps log files based on three kinds of events:

• Security events

• System events

• Application events

Note

Although Windows XP uses only these three basic log files to record significant events that occur on the system, a Windows Server computer (such as a domain controller) can record events for a ...