DESELECT THE ADMINISTRATIVE EVENTS IN EVENT VIEWER

Similar Questions

• How to clear the administrative events - Event Viewer log

  Hello:

  Anyone know how to clear the administrative events log listed under custom in the event viewer views?

  All the logs listed in Windows logs do not have options to clear, but the back above.

  Thank you

  ColTom2

  Hey Colonel,

  It is because this isn't 'really' a newspaper, in itself.
  This is a Search of the newspaper (and there is MUCH more that most people know), filtered to show all events in administrative type.
  The source column shows you which newspaper it came from originally.

  To get rid of them, you will need to erase all records.

  If you want to get an idea:
  Go down to the Applications and Services logs, and expand.
  Microsoft, expand it.
  Then Windows.

  Nice list?
  You need to open and delete all. To really delete it.
  VP Tech Services

• How to clear the administrative events in 'eventvwr' in Windows 7

  Is anyone out there who can help me with this problem?   I'll tell you.

  (1) first run the command eventvwr...

  (2) this will open the Event Viewer log...

  (3) then click on "Custom views" and make a double click on it...

  (4) then you will see "Events Administrative", click on it...

  (5) a window opens showing all, WARINGS, error messages...

  I talked with Microsoft about this, they said there is no way to delete these...  I was able to clear all sections within a field by doing a "REFRESH in all...»  Microsoft also said to get rid of this, is only to restore your computer to a factory State...   I know that this can be done without a complete restoration...

  Can someone help, please

  Stephen

  Original title: Windows 7 'RUN' command 'eventvwr '.

  Moved to Virus & Malware

  Hi, thanks for trying, but your response was not useful at all, sorry...   I am looking for a way to remove all the symbols warning under "Administration events Logs '...  I know how to clear all the undernearth, but it is the main I want to erase without having to do a factory restore.

  Thank you

  Steve

  (1) I don't know why you're moping around the event viewer and what you're trying to achieve by disabling the administrative events. They are just the alerts and messages that won't just compensation without tackling the real problems reflected by alerts administrative event.

  (2) by design, you cannot delete it interface in the Event Viewer because it isn't 'really' a newspaper. Its a kind of a filter of administrative events of all cumulative newspapers (Application/security/system other applications etc.) you see in the eventvwr.

  

  (3) factory restore to clear the administrative events is a kind of a solution that might be similar to "Burn down your House to kill the rat"

  (4) so how do? Do it yourself manually. Create a file beats using below and run it... (Run as Admin)

  off @echo FOR /F "tokens = 1, 2 *" %%d IN ('bcdedit'), DO DEFINE adminTest = % V IF (noAdmin goto %adminTest%)==(Access) for /F "tokens = *" %%d in ('wevtutil.exe el') DO (call: do_clear ' % G ') echo echo, event logs have been cleared! ^ goto theEnd: do_clear echo %1 wevtutil.exe cl %1 goto of compensation: eof: noAdmin echo, you must run this script as an administrator! echo ^ ) : theEnd pause > NULL

  More details step by step

  https://www.YouTube.com/watch?v=1ehpcI7TZmw

  http://aspnettutorialonline.blogspot.com/2014/02/how-to-clear-administrative-events-in.html

  (5) results on my pc after doing... (Please note that it is dynamically regenerating alerts even after clearing alerts.) It's a sort of ephemeral clearing! )

  

  WARNING: -.
  It is a self-help guide that is tested before posting. Guide tested for Windows 10. However, use at your own risk.

• Administrative event viewer

  while trying to figure out why my system suddenly takes a very notable longer amount of time to connect to the internet, I came across "Event Viewer". I am far from an expert. I clicked on Administrative event viewer. It shows more 9 000 errors of today. Again, I know just enough about the computer system, to screw it up, to try something that I know nothing. Can I get help from this site?

  I would not consider 9 000 errors in a normal day, but I'm not an MVP.

  My system of each power on/off cycle I have 3 errors and 2 warnings (warnings and errors are not the same) and they are the same each time:

  

  Since I looked into errors, I know they come from attempts by the system to obtain a network address when other things on the system are not quite ready yet (since the system is still to come and not quite 'ready').  Then, repeat these steps and when everything is ready the system managed to obtain a network address and everything is good for the rest of the day - no more errors or warnings for the entire day.  The warnings are when the system shuts down and the Services are stopped.  There is probably not much I can do to 'fix' people, but since I understand what they mean, and I did more during the day, they cover not me - I know what they mean.

  No event in the Event Viewer log must defy explanation and it is possible that some of them could be ignored.  I have that 3 673 administrative events for the last 7 months (lots and lots and lots of reboots) and you have 9000 per day and don't think it's an indication that something might not be quite right?

  I don't see how someone can say that your event can be ignored without knowing what they are unless you are just in the habit of ignoring the events.  I wouldn't be able to stand or to tolerate 9000 events in one day.

  You have learned that unchecking the yellow displayed in Autoruns "File not found" is not your system run faster.  Since these are just references to a path/file/folder on your system that doesn't exist more there is nothing for them to do, nothing going to happen which can consume any time.  And you can see them again the next time you reboot your system.

  Pink/red Autoruns entries are usually things with third party programs that the Publisher didn't bother sign digitally... Description and the editor fields are often empty - probably not a problem.

  For start-up problems, the best place to watch in Autoruns is the tab connection since that is where will be your startup items and from there you can methodically clear things, restart your system and see what things look like:

  

  If your system is simply slow start and then runs properly the rest of the time you should watch all your startup items and chances are very good that there are many things that can be disabled - at least to test.

  I'll be sure to do a system restore point (for security) before you make permanent changes so in case things get worse, you can undo the changes and start over with your troubleshooting.

  Some people like to use the built in the msconfig program to see what that their startup items, and clear that they do not have.

  Here's what looks like on my system msconfig Startup tab:

  

  I have no startup items to worry, but you have some people who need/want and no one can tell you what you might be able to remove without seeing a list.

  I'm not a Microsoft MVP, but I'm still 9 administrative errors event someday I'd find them, come with an explanation to know what they mean and making an effort to fix them if I could.

  I wouldn't consider 9000, tens of thousands or millions of errors a day somehow to be normal.

• hpqcxs08 hpqddsvc and missing service in the Windows Event Viewer

  I am running Win 7 64-bit Sp1, the printer is C7180 all in one

  When you run the Windows Event Viewer, system reports hpqcxs08 hpqddsvc missing in the path and service or are corrupt.

  When I search using windows Explorer, cannot find hpqcxs08 or hpqcxs08.dll.

  When I search using windows Explorer, cannot find hpqddsvc. It shows hpqddsvc.log

  How can this be corrected?

  Thanks for any help. John Foster

  Thanks for your info

• What is the 528 event in the security event viewer in Windows XP Home Edition?

  What is the 528 event in the security event viewer in Windows XP Home Edition?

  Hello

  Are you facing problems with your computer?

  Check out the link for details about event ID: 528

  http://www.Microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+operating+system&ProdVer=5.0&EvtID=528&EvtSrc=security

  For reference:

  Procedure to view and manage event logs in Event Viewer in Windows XP

  http://support.Microsoft.com/kb/308427

• T410 2516CTO random freezes without anything in the Windows Event Viewer. :(

  I used Update Retriever + slim Installer (practically system update 4.0 but a client version + server) to download the drivers and install Windows 7 Ultimate x 64 with SP1 on this machine. It takes a hard power off by pressing the button for 5 seconds

  Core i7 620M

  8 GB RAM

  320GB 7.2 k RPM HARD drive

  Optimus graphics

  Gobi2000 WWAN

  uPek Fingerprint reader

  The machine crashes without warning and did with the two installation (more common) factory and with the deleted HARD disk and using Windows 7 Ultimate SP1 from Microsoft x 64 slipstreamed (freezes much less often). Are there tools that I can use to help diagnose this problem?

  I also used an adapter 90W AC and 65W adapter on this machine. The random freezes occur on each adapter as well.

  I read other people who have the same frustrations on to freeze, but no other situation is exactly the same as mine unfortunately - most other occasions you can find something in the Windows Event Viewer!

  Hi again

  Discovered it was the 6300 WiFi Intel that was locking the machine. It disabled via switch h/w or BIOS does the gel to disappear.

  So he left. Once off the coast of the incident of a 6300 wireless card has failed.

• How to use the Microsoft Event Viewer to diagnose the breakdowns of the system

  Unless manually modified Windows will log errors in Event Viewer. Information on these errors usually help determine which collapses and why it crashes. Often, they are used to diagnose if the computer shows a blue screen and you are unable to obtain information on the blue screen.

  To run the click Event Viewer on start and start typing event viewer in the search programs and files. When the Event Viewer appears in the list, select it and run the program.

  Once at the Event Viewer you need to descend to the level of the category. There are three broad categories that you want to fix the errors of. You can get to these categories by the expansion of the group Windows logs on the left side. According to newspapers in Windows, you can see Applications, security, and system. It's three groups where you want to see which crashed and why.

  To start, click on the list of applications and you will see a list of events which occurred on the right side. Events fall into three categories

  Information - low

  WARNING - Medium

  Error - high

  Information events can be ignored in general these are things just information on your system. This can be an event as a disk defragmentation has been made and has been a success.

  Warning events have an average level, because more often that otherwise, so it can be ignored and pose no immediate threat to your system.  Caution do not generally broken systems if your computer is crashing or having problems then is not likely caused by the warning events.

  The errors have a high level and if your system crashes that could be due to the error. Since we are talking about the blockages and system errors, we will focus our attention on error events.

  

  In the screenshot, an error has been highlighted and this is what we will discuss.

  At diagnosis of the fault of the system you must ensure that you first you know what time your system crashed so that you can make sure you are looking at the correct event log. The newspaper of the events above is just an example of an error and is not one which would be generally cause a system crash. It is only for purposes of dimenostrational.

  Now that you have what time the system crash occurred that you want to go to the event viewer and look for the error event. Once find you it you can highlight.

  Once selected, you will find information about the event just below. The first thing you want to note is the description. He will often tell you what crashed and why it crashed and is sometimes followed by an error code or at least included in the description.

  The error code will help you to determine why something is a failure. You can meet the followed a string of numbers such as STOP error: 0x0000007B (0xEB82784C, 0xC0000034, 0x00000000, 0x00000000).

  With the error code can be a file name or a path. Maybe it's not always what causes the error, but it does not say where the error is being generated from, important for the diagnosis of the root causes.

  More information, you are able to capture the best of assistance which can often be given. Blue screens can be tricky to solve in the fact that it can be caused by thousands of different programs and features.

  If you encounter a blue screen, it is important to go into the event viewer and try to capture information as to why the error occurs.

  The event viewer is like your journal of computers. It keeps all this hidden information and it tells the life of computers and what tragic things happen.

  This guide is intended to help you understand what is the event viewer and if you experience crashes how to know why and what causes accidents.

  If you experience crashes or problems using Event Viewer please use the new post and create a thread in which the issue that you are experiencing. Don't forget if you have accidents, including the information from the logs event viewer also help us solve the problem you are experiencing.

• VC die randomly and the windows event viewer will display the following error message

  Hello

  in the last time we are experience a lot of vc crashes and the windows event viewer shows the following error:

  ORA-01483: invalid length for the DATE or NUMBER variable binding

  "is returned when you run the SQL" UPDATE VPX_VM SET TOOLS_STATUS =?, TOOLS_VERSION =?, GUEST_OS =?, GUEST_FAMILY =?, GUEST_STATE =?, DNS_NAME =?, IP_ADDRESS =? WHERE ID =? ».

  ORA] ORA-12899: value too large for column 'VPXADMIN '. "" "" VPX_VM '. "" IP_ADDRESS"(real: 40, maximum: 16)

  "is returned when you run the SQL" UPDATE VPX_VM SET TOOLS_STATUS =?, TOOLS_VERSION =?, GUEST_OS =?, GUEST_FAMILY =?, GUEST_STATE =?, DNS_NAME =?, IP_ADDRESS =? WHERE ID =? ».

  There is no update or modify the software to vmware esx/vc or oracle.

  Anyone has the same problem or have a solution/fix for this problem?

  Environment:

  Oracle 10.2.0.3 DB

  Virtual Center 2.5 U3

  VMware ESX cluster

  Vmware ESX 3.5 Server Patchlevel 1 x 143128

  3 x Vmware ESX 3.5 Server Patchlevel 123630

  This is a known bug in oracle - 10.2.0.3. Upgrade to 10.2.0.4 or install the Oracle patches 6085625 and 6452485 (as far as I remember you just one of them, but for the moment, I can't say that one)

  --

  There are 10 types of people. Those who understand binary and the rest. And those who understand the gray code.

• 4215 Java error: when connecting the IPS Event Viewer

  Hello-

  I got a java error trying to connect to my 4215 with Cisco IPS event viewer. It's as follows:

  IOException in Subscription() open: java.security.cert.CertificateExpiredException: NotAfter: Sunday 29 March

  The web server is running on 10.x.x.x:443? Please check the settings of the device communication.

  I can set the date on my pc to last week and everything works very much like b4. I tried to update my java to the latest version and created a new certificate of IPS.

  Any help would be greatly appreciated:

  Thank you

  Hello

  The problem can be solved by following the steps below

  1. connect the sensor.

  2. run the tls - generate the command key.

  3. make sure that the certificate is generated.

  4 Add the device again. It should work now.

  Ref: http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_qanda_item09186a008025c533.shtml

  Whether she helped.

  Concerning

  Sridhar

• After installing the updates, event viewer says "Some of the updates are not applicable for this system"

  I have a laptop Toshiba Satellite L355D-57901.  I am running Windows Vista Home Premium SP2.  I have the updatedWindows updates in place so that I can revisit before installing.  After you install the updates, I noticed for some time that when I check myEvent Viewer , there are several errors indicating that "Windows Servicing identified that package (the number of update i.e. KB980436 (security update) is not applicable to this system .).   Can you please tell me why?  Thank you very much.

  Hi Simply4real,

  Check out the link below to a thread with similar problem and check if it helps.

  http://social.technet.Microsoft.com/forums/en-us/itprovistasetup/thread/c6883a0c-FF12-4bcd-86e0-4af3006eb7ce/

  I hope this helps!

  Halima S - Microsoft technical support.

  Visit our Microsoft answers feedback Forum and let us know what you think.

• Why is there a warning and error in administrative events in Event Viewer?

  When I open the event viewer, and then the chip on the custom view and then double-click Administrative events there are warnings and errors in this case why that is and what I need to fix it or leave it alone.

  [Moved from comments]

  Please provide us with your administrative Event Viewer logs by following these steps:

  Click on Start Menu
  Type eventvwr in the find programs and files (do not hit enter)
  Click with the right button on eventvwr.exe and click Run as administrator
  Expand custom views
  Click the administrative events
  Right-click Administrative events
  Record all events in custom view as...
  Save them to a folder where you will remember which folder and save it as Errors.evtx
  Go where you saved Errors.evtx
  Make a right click Errors.evtx-> send to compressed (zipped) folder of->
  Download .zip here (if you can) to skydrive or a file sharing service

• Question about consistent errors in the event viewer XP Home Edition

  I ran a program called VEW looking errors up to twenty in the XP Event Viewer.

  Here is the data for the analysis of files:

  V01c Vino event viewer run on Windows XP in English
  Report run at 28/01/2012 23:42:23

  Note: All dates below are in the format dd/mm/yyyy

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  "System" Log - error Type
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  Journal: "System" Date/time: 01/28/2012 22:48:06
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 01/28/2012 22:47:40
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 01/28/2012 22:35:31
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 27/01/2012-22:49:54
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 27/01/2012-22:37:21
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 27/01/2012-14:32:57
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 27/01/2012 03:38:23
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 25/01/2012-13:53:36
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 25/01/2012-13:32:34
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012 23:35:59
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 24/01/2012 23:21:10
  Type: error category: 0
  Event: 29 Source: W32Time
  The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible.  No attempt to contact a source will be for 14 minutes. NtpClient has no source of accurate time.

  Journal: "System" Date/time: 24/01/2012 23:21:10
  Type: error category: 0
  Event: 17 Source: W32Time
  Time provider NtpClient: an error has occurred during the DNS lookup of the manually configured peer 'time.nist.gov, 0x1 '. NtpClient will try the DNS lookup in 15 minutes. The error was: a socket operation was attempted to an unreachable host. (0 x 80072751)

  Journal: "System" Date/time: 24/01/2012 23:18:36
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012 02:15:46
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012-12:58:29 AM
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 24/01/2012 00 h delighteth
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: 'System' time: 23/01/2012 23:26:32
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: 'System' time: 23/01/2012 23:26:19
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: 'System' time: 23/01/2012 23:02:41
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: 'System' time: 23/01/2012 18:28:49
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012 23:35:59

  Parameters of scanning has been:

  • System
  • Errors
  • 1-20 errors, valued at twenty.

  What are these errors and they are nothing to worry about?

  I have Nero 8 on this system and have an updated hosts file the running here: http://winhelp2002.mvps.org/hosts.htm

  Not sure, but I may have changed a network setting to activate the new hosts file work properly.

  Seen these errors for a while. system works well and smoothly.  No symptoms of malware or infection seen or found.  I would call these software errors as they seem does not affect the operation of the system.

  XP Home Edition SP3 P4 2.8 2 GB RAM

  Joe

  Oh yes :)

  I have never used the program VEW and don't think I will check it - I just look at the Event Viewer logs the old-fashioned way (manually) if I think that there is a problem, but that might just be the old me.

  It is true that XP Home doesn't have Group Policy Editor, but all policy settings are always available via the registry.

  Some malware will change your GP settings and cause problems.

  I have a little import registry will correct all the ones I know, so if someone has these symptoms, any flavor of XP, they are running, I'll just send the script because sometimes you will be not able to solve the problem, even if you have not the GP Editor.

  The registry always import work - and work well for XP Home or XP Pro.  If you have the symptoms and XP Home, what would you?   Start the import operation of the registry.

  If you're curious, off on my SkyDrive it is a spreadsheet Excel (Group Policy settings) who has all the parameters of GP and where they are in the registry.  I do not recommend start searching, but it is useful to know where things are if there is a problem.

  I would not allow the connection of a security XP stuff unless you think you're being attacked.  More and verbose logging slows things down.  My Event Viewer Security log is empty.

  Find the links to the Microsoft Support Engineer for the most part useless to actually solve a problem (because it help you with your problem), if someone has a question or point of Event Viewer, I usually just send them this:

  To view the logs in Event Viewer, click Start, settings, Control Panel, administrative tools, event viewer.

  A shortcut to the event viewer is to click on start, run and enter in the box:

  %SystemRoot%\system32\eventvwr.msc

  Click OK to launch the event viewer.

  The most interesting newspapers are usually the system and Application logs.

  Some newspapers such as security and Internet Explorer may be completely empty or have just a few items.  The default settings for XP wants do not connect all this activity, unless you need to solve a problem in these areas.  If you enable logging for them the papers fill up quickly and could adversely affect the performance of your system with all the extras (often unnecessary) activity.

  If you have Microsoft Office installed, it has its own newspapers, and they can be empty or occasional boring activity very little or, if there is no problem with your desktop applications.  It's normal.

  Not every event is a problem, some are informational messages that things work very well, and some are warnings.

  However, no event should defy reasonable explanation.

  Each event is sorted by Date and time.  Errors will be red Xs, warnings will have yellow! s.
  Informational messages have white is.  Not every error or warning event means that there is a serious question.

  Some are excusable at boot time when Windows starts.  Try to find only the events to the date and time around your problem.

  If you double-click on an event, it will open a window of properties with more information.  On the right are black up and down arrow keys to scroll through the open events. The third button that looks like two overlapping pages is used to copy the details of the event in your Windows Clipboard.

  When you find an interesting event that occurred at the time of your question, click on the third button at the top and arrows to copy the details and then you can paste the details (right click, paste or CTRL-V) the text in detail here for analysis.  Remove all personal information from your information after you paste If you are forced to do so.

  If you paste an event, it will look something like this annoying system startup event:

  Event type: Information
  Event source: Service Control Manager
  Event category: no
  Event ID: 7035
  Date: 14/07/2010
  Time: 17:54:18
  User: Jose
  Computer: computer

  Description:
  The Remote Access Connection Manager service was sent successfully a starting control.

  To get a fresh start on any log of the event viewer, you can choose to clear the log (the log backup is available), and then reproduce your problem, then just look at the events around your show and troubleshoot events that are happening when you have your question.

  You can search for events on the World Wide Web and get ideas.  It's where people events they see and then to the top of their questions, ideas and solutions:

  http://www.EventID.NET/

  If you find your event in the discussion, the first idea or discussion does not necessarily mean it is the "answer" to your situation, so read through all the ideas to find the one that sounds more like your situation.

• Event Viewer: the newspaper of the clearing system

  I want to erase all my system logs to remove old errors corrected headlines.

  In any case, I have cleared all the logs in the event viewer, but the administrative events has still some OLD critical errors in it.  It seems there are two SOURCEs, I can't find logs for:

  1 Dhcp-Client
  2 PrintService

  Are they in the observer of events somewhere?
  If not, how can I make them disappear.

  It's OK, I thought about it.

• How to remove the event errors in Event Viewer

  How can I remove error event in the Windows Event Viewer 7

  Save this batch on your desktop file, it removes the windows event errors 7. Open Notepad, and then paste this below in and save it as clearevent.bat

  off @echo
  FOR /F "tokens = 1, 2 *" %%d IN ('bcdedit'), DO DEFINE adminTest = %% V
  IF (%adminTest%) == (Access) goto noAdmin
  for /F "tokens = *" % in ('wevtutil.exe el') DO ("call: do_clear" ' % G ')
  echo.
  echo goto theEnd
  : do_clear
  Echo %1 of compensation
  wevtutil.exe cl %1
  Goto: eof
  : noAdmin
  output