BigDaddy Posted September 23, 2005 Share Posted September 23, 2005 I really hate it when I have so many messages in the event, telling me nothing more then when a PC has connected and when a remote desktop link was establisheed..I wanna disable some of this so I don't by mistake miss a LOG that would be important. Link to comment Share on other sites More sharing options...
Davor Posted September 24, 2005 Share Posted September 24, 2005 (edited) Look in the group policy for audit policylooks like this:Policy Security SettingAudit account logon events No auditingAudit account management No auditingAudit directory service access No auditingAudit logon events No auditingAudit object access No auditingAudit policy change No auditingAudit privilege use No auditingAudit process tracking No auditingAudit system events No auditingGreetsDavor Edited September 24, 2005 by Davor Link to comment Share on other sites More sharing options...
BigDaddy Posted October 17, 2005 Author Share Posted October 17, 2005 Sweet.But I have an app RemotelyAnywhere which constatly adds whoever connects to it, and I have like 30connects per day. How do I disable this? Link to comment Share on other sites More sharing options...
Davor Posted October 17, 2005 Share Posted October 17, 2005 You should look in the program itself as that's the source of the events.I don't think there is a way to 'block' events from certain programs.You can also try to filter the longs through event viewer.GreetsDavor Link to comment Share on other sites More sharing options...
BigDaddy Posted November 15, 2005 Author Share Posted November 15, 2005 Tried the filter part, but the thing is that the thing I filter is then listed. But I want the filtered thing to not be listed.Any I looked round the program and I can't find no option for disabling event log writing. Link to comment Share on other sites More sharing options...
Singh Posted November 16, 2005 Share Posted November 16, 2005 Ok Yes we can disable the events in eventviwer through registry,copy paste the event u want to disable, and i can tell u which registry needs to be modifiedSingh Link to comment Share on other sites More sharing options...
BigDaddy Posted November 17, 2005 Author Share Posted November 17, 2005 Event Type: InformationEvent Source: RemotelyAnywhereEvent Category: General Event ID: 103Date: 17.11.2005Time: 18:31:29User: NT AUTHORITY\SYSTEMComputer: SERVERDescription:User ****** has successfully logged on with ****** authentication from IP address ******* Secure (SSL) Connection: Yes Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now