Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows Vista
    - Admin Tips
      - Administration
        Backing up event logs

Section(s): Administration
Published on Aug 22, 2006.
Last Modified on Aug 22, 2006.
Last Modified by Mitch Tulloch.
Rating: Not Rated

How to configure Vista to back up event logs.

Windows Vista now lets you use Group Policy to configure event logs so they get backed up when they become full. To configure this using local Group Policy do the following:

1. Type gpedit.msc in the Start Search box and hit Enter.

2. Click Continue when the UAC prompt appears.

3. Navigate to the following policy location:

Computer Configuration\Administrative Templates\Windows Components\Event Log Service

4. Look under Application, Security, Setup or System to configure settings for the log desired.

5. Enable the following policy setting:

Back up log automatically when full

Note that you should also disable the following policy if you are going to configure the above setting:

Retain old events

If you do this, then when the event log becomes full, the event log file is closed by Vista, renamed, and a new event log file is created.

Cheers,
Mitch Tulloch, MVP
http://www.mtit.com

About Mitch Tulloch

Mitch Tulloch was lead author for the Windows Vista Resource Kit from Microsoft Press, which is the book for IT pros who want to deploy, maintain and support Windows Vista in mid- and large-sized network environments. Mitch was also the author of Introducing Windows Server 2008 and technical project lead for the Microsoft Office Communications Server 2007 Resource Kit, both books also from Microsoft Press. For more information on these and other books by Mitch, see www.mtit.com .