[logs] Some remarks regarding Vista's event logging

Wed Apr 11 15:58:07 PDT 2007

BTW they aren't ADM files but ADMX (they are XML based) and no, from 
what I am hearing they probably won't go on a 2k3 box. They aren't the 
same format.

http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971a-0c5b090dc4fd1033.mspx?mfr=true

New Windows Vista–based or Windows Server "Longhorn"–based policy 
settings can be managed only from Windows Vista–based or Windows Server 
"Longhorn"–based administrative machines running Group Policy Object 
Editor or Group Policy Management Console. Such policy settings are 
defined only in ADMX files and, as such, are not exposed on the Windows 
Server 2003, Windows® XP, or Windows 2000 versions of these tools. An 
Administrator will need to use the Group Policy Object Editor from a 
Windows Vista–based or Windows Server "Longhorn"–based administrative 
machine to configure a new Windows Vista–based Group Policy settings.

Eric Fitzgerald wrote:
> Frank, it appears that your test machine was upgraded (perhaps multiple
> times) from pre-release version of Windows and that THAT had been
> upgraded from Windows XP, and that your registry contains entries that
> were bugs in pre-release versions that are not present in RTM.
>
> I would encourage you to repeat your test on a clean, new installation
> of a RTM Windows Vista machine (not an upgrade from a beta), and report
> any problems that still remain.
>
> We know that Windows XP's Event Viewer does NOT have full support for
> uplevel logs, and it probably never will, but things are not quite as
> bad as you describe.
>
> Best regards,
> Eric
>
>
> -----Original Message-----
> From: loganalysis-bounces at loganalysis.org
> [mailto:loganalysis-bounces at loganalysis.org] On Behalf Of Frank Heyne
> Sent: Wednesday, April 11, 2007 1:58 AM
> To: loganalysis at loganalysis.org
> Subject: Re: [logs] Some remarks regarding Vista's event logging
>
>   
>> You can't look at a Vista event log on  an XP.
>>     
>
> This is not entirely true:
> 1. You can look at the Application, System and Security log of a Vista
> machine from NT 5 very well, (and much better as the Event Viewer does,
> by
> the way).
> 2. You could look at the other logs mentioned in the article as well, if
> the Registry values would not be as buggy as they are.
> 3. You could look at all Vista logs from NT 5 if the OpenEventlog
> function
> would work as documented (that is, would open all event files under
> Vista)
>
> As I wrote at the end of the article,  the logs mentioned do not work at
> all, because Vista does not write any events into them. So it does not
> matter from where you want to open them.
>
>
>   
>> Service pack has nothing to do with this issue..
>>     
>
> I would not wonder when the errors in the Registry would go away with
> SP1
> of Vista ;-)
>
>
>   
>> I can't look at my Vista group policy settings on my 2k3 box, I have
>>     
> to
>   
>> manage Vista group policies from a Vista workstation as well.
>>     
>
> I could imagine Microsoft will provide the ADM files soon.
> Currently there is no server version of NT 6 available, so they will
> care
> to provide a comfortable way for such customers who want to use Vista
> already, won't they?
> Is it too much of a wish when the admin wants to be able to administer a
> domain from one machine?
>
> Microsoft already was forced to provide Winhlp32 for Vista, sure the
> will
> provide Vista ADM files for W2K3 and remove some bugs as well ;-)
>
>   
>> Frank Heyne wrote:
>>     
>>> May be this is new for you, may not:
>>> http://www.heysoft.de/Frames/Vista_Remarks1_en.htm
>>>       
>
> Have fun
> Frank Heyne
> http://www.heysoft.de/
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysis at loganalysis.org
> http://www.loganalysis.org/mailman/listinfo/loganalysis
>
>
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysis at loganalysis.org
> http://www.loganalysis.org/mailman/listinfo/loganalysis
>
>   