Information Technology Reference
In-Depth Information
IIS logs, firewall logs in the W3C standard log file format, and even metadata stored by the oper-
ating system about files and folders on a Windows hard drive. In this case, the Windows
Firewall creates a log file in the W3C file format that can be easily queried by the Microsoft Log
Parser.
While you cannot parse a log file or the Event Viewer using Group Policy, you can (and
should) use a Group Policy object (GPO) to enable event auditing for your Windows computers
wherever possible. This ensures that all of your Windows Server 2003 computers are recording
the same types of data, to ensure that no security-related events go unnoticed because they are
not being audited.
See Also
Microsoft TechNet: “Events and Errors Message Center” (
http://www.microsoft.com/
technet/support/ee/ee_advanced.aspx
).
Even ID.net (
www.eventid.net
): This site provides detailed information on Windows
Event Viewer entries.
The Unofficial Log Parser Support Site (
www.logparser.com
).
