install and manage the service
You can access the service management
- By clicking the
button of the toolbar.
- By the context menu of a station object to
have the state of the service for the selected station.
- By the context menu of
the tray icon to have it for the local computer.
Before using the service, you must install it first:
- Access the service management on a specific station or server:
- Then click on Install:
Don't forget to specify the type of starting:
- Automatic (the service starts automatically on each reboot)
- Manual (allow the startup manually)
- None (prevent the startup)
You could now choose the logon user account for the LogSched service. The default is the local system account,
but if you want to access to remote resources, you should use a domain system account. You must specify the account with the format: DOMAIN\ACCOUNT.
To start the service, the account must have the right Log on as a service.
If you install the service on a remote computer, you must copy the executable
service file LogSched.exe to the remote computer by clicking the Copy executable
in directory checkbox. If you install the service on the local station, you
can choose to keep the executable on the WDumpEvt directory or to copy it to
the system directory.
- To add it to this user on Windows NT 4, you must open the user manager for the remote computer, Policies menu, choice User Rights.
Check Show Advanced Users Rights, Select the right Log on as a service and add the user.
- To add it to this user on Windows 2000, You must launch the tool Local Security Policy (control panel -> Administrative Tools),
and choose Local policies -> user rights and add the user to the right Log on as a service.
If you have loaded the additional dll (MFC42.dll...) on your computer, you also need these files for the service.
In this case, I give you the advice that you'd better install the service in it own directory or the one of WDumpEvt to avoid conflict with your system dll.
- And at last you must start the service via the same window, or via the
service manager of the system.
You can check the state of the service at the top of this windows, or with
the service management, the name of the service is: Eventlog Scheduler
When you change the state of the service, it might take a little time,
especially if you stop the service during an action. The service will end the
action before stopping.
Uninstall the service
Before uninstalling the service, you must stop it first.
When you uninstall the service, you may choose to keep the executable or
not. It is better to erase the file if you have copied it into the system
directory, but not to erase it if you keep it in the WDumpEvt directory.
You can only delete the service executable if the event viewer is not open
on the application log because it uses this file to decode the event description.
Don't forget to uninstall the service before uninstalling the WDumpEvt
software, because Windows NT has no procedure to uninstall a service!
For each of these operations, an event is written in the application