How to specify which events 2 log in EVENT VIEWER

[BigDaddy]

I really hate it when I have so many messages in the event, telling me nothing more then when a PC has connected and when a remote desktop link was establisheed..

I wanna disable some of this so I don't by mistake miss a LOG that would be important.

[Davor]

Look in the group policy for audit policy

looks like this:

Policy Security Setting

Audit account logon events	No auditing
Audit account management	No auditing
Audit directory service access	No auditing
Audit logon events	No auditing
Audit object access	No auditing
Audit policy change	No auditing
Audit privilege use	No auditing
Audit process tracking	No auditing
Audit system events	No auditing

Greets

Davor

Edited September 24, 2005 by Davor

[BigDaddy]

Sweet.

But I have an app RemotelyAnywhere which constatly adds whoever connects to it, and I have like 30connects per day. How do I disable this?

[Davor]

You should look in the program itself as that's the source of the events.

I don't think there is a way to 'block' events from certain programs.

You can also try to filter the longs through event viewer.

Greets

Davor

[BigDaddy]

Tried the filter part, but the thing is that the thing I filter is then listed. But I want the filtered thing to not be listed.

Any I looked round the program and I can't find no option for disabling event log writing.

[Singh]

Ok

Yes we can disable the events in eventviwer through registry,

copy paste the event u want to disable, and i can tell u which registry needs to be modified

Singh

[BigDaddy]

Event Type: Information

Event Source: RemotelyAnywhere

Event Category: General

Event ID: 103

Date: 17.11.2005

Time: 18:31:29

User: NT AUTHORITY\SYSTEM

Computer: SERVER

Description:

User ****** has successfully logged on with ****** authentication from IP address ******* Secure (SSL) Connection: Yes