Services Utility: Event Log Service
| Display Name (?): | Event Log | ||||||||||||||
| Short Name (?): | EventLog | ||||||||||||||
| Executable (?): | services.exe | ||||||||||||||
| Library (?): | els.dll | ||||||||||||||
| Depends On (?): | None. | ||||||||||||||
| Supports (?): | File Replication, Network News Transport Protocol (NNTP), Remote Storage Engine, Remote Storage File, Remote Storage Media, Remote Storage Notification, Remote Storage Server, Simple Mail Transport Protocol, SNMP Service, SNMP Trap Service, Terminal Server Licensing, Windows Internet Name Service (WINS) | ||||||||||||||
| Description (?): | Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. | ||||||||||||||
| OS (?): | NT4 Workstation, 2000 Professional, XP Home/Professional, Vista Home/Business, NT4 Server, 2000 Server, Server 2003, Vista Server | ||||||||||||||
| Startup (?): |
| ||||||||||||||
Explanation (?): | The event log service is very helpful when used to track a problem or security violations. This service tracks when why an application crashed, any security audits you have running such as monitoring logon failures, services that refuse to start or terminate in a strange manner, group policy modifications, and many other things that are very useful in logging. In most environments you will always want to have this running on automatic unless you really need to conserve resources. Be wary of disabling this service as any problems you have that may have been explained in the event log will go unlogged. On a corporate network it is a very good idea to have this enabled with security audits running (set up through the local security policy editor). |