Is there a way to run a report for specific Event ID's on client PC's? For example if we want to run a report for Event ID 4670 to track if Permissions on an object were changed.
Thanks
Hi Jay,
No, we can collect some data from Event Logs on Windows Update and Update Services Server Events, but not for specific Event IDs.
You may wish to take a look at a new feature in Windows Server 2008, Event Log Subscriptions - but it is not available on Windows Server 2003.
What information can we report against in the EventLog? I would like to search for a string inside the description block.