[logs] Some remarks regarding Vista's event logging

[Frank Heyne]

We never installed a beta version of Vista on those machines :-)
I checked around 10 different installations of Vista (Enterprise,
Bussines, Ultimate, English and German, 32 and 64 bit), all installed on
clean partitions on different machines from either MSDN DVDs or images
downloaded from MSDN. The Registry errors are an ALL those installations.
With other words, I never saw a version of Vista without those errors.

Have fun
Frank Heyne
http://www.heysoft.de/

> Frank, it appears that your test machine was upgraded (perhaps multiple
> times) from pre-release version of Windows and that THAT had been
> upgraded from Windows XP, and that your registry contains entries that
> were bugs in pre-release versions that are not present in RTM.
>
> I would encourage you to repeat your test on a clean, new installation
> of a RTM Windows Vista machine (not an upgrade from a beta), and report
> any problems that still remain.
>
> We know that Windows XP's Event Viewer does NOT have full support for
> uplevel logs, and it probably never will, but things are not quite as
> bad as you describe.
>
> Best regards,
> Eric
>
>
> -----Original Message-----
> From: loganalysis-bounces at loganalysis.org
> [mailto:loganalysis-bounces at loganalysis.org] On Behalf Of Frank Heyne
> Sent: Wednesday, April 11, 2007 1:58 AM
> To: loganalysis at loganalysis.org
> Subject: Re: [logs] Some remarks regarding Vista's event logging
>
>> You can't look at a Vista event log on  an XP.
>
> This is not entirely true:
> 1. You can look at the Application, System and Security log of a Vista
> machine from NT 5 very well, (and much better as the Event Viewer does,
> by
> the way).
> 2. You could look at the other logs mentioned in the article as well, if
> the Registry values would not be as buggy as they are.
> 3. You could look at all Vista logs from NT 5 if the OpenEventlog
> function
> would work as documented (that is, would open all event files under
> Vista)
>
> As I wrote at the end of the article,  the logs mentioned do not work at
> all, because Vista does not write any events into them. So it does not
> matter from where you want to open them.
>
>
>> Service pack has nothing to do with this issue..
>
> I would not wonder when the errors in the Registry would go away with
> SP1 of Vista ;-)