Troubleshooting with Windows Logs

Windows 10 Version 1607 All EditionsWindows 10 Version 1511 Virtual EditionsWindows 10 Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 ten Windows SP1 2011 Energy Tax Credits Windows Ultimate 7 Windows Establishment 7 Windows Professional 9 Windows Home Premium 7 Windows Home Basic 7 Windows Starter More…Less

The Windows Journal has been removed from some versions related to the Windows operating system. This redesign allows users to install Windows Journal with uninstalled versions of Windows. This package replaces the previous version and can be built from it.

This update adds Windows Log to the appropriate system settings. Please read the dedicated Prerequisites before installing this update.

This will help the overhaul reduce the risk of corrupting the Windows file log. The update provides them withA message box that opens whenever Windows Journal attempts to open an actual journal note (JNT) or journal template (JTP) file. The window displays the following message:

The log files may contain security risks. Only really open this file log if you trust the source of the file. Would you like to continue scanning files?
The message window has Yes and No buttons, as well as a help option for buttons that respond to the message. The default action has always been no. The “Yes” and “No” options close the message box. Yes, the permanent opening of the file is done in the log. No closes the message box without asking for a file. Help opens the basic knowledge article on the default website for more information.

Note The project window appears when the log windows suggest not opening a .jnt or .jtp file.

Users who install Windows Journal and upgrade to Windows 10 version 1607 will find that the Windows Journal app does not work for a long time.

Resolution
Repair the installation of the Windows Journal application by selecting Systemdark settings” > “Apps & Features”.

Note. Journal Note Writer is considered a printer driver that allows users to create journal files, for example by printing computer files from any application.

The following files can be downloaded from the Microsoft Download Center.

To apply this update, the public update to remove Windows Journal Components (3161102) must be installed with Windows 10, Windows 10 version 1511, Windows 8.1, and Windows 7 SP1.

In Windows 7 SP1, you also need to install the Tablet PC Features add-on.

You don’t need to make any changes to the registry to update it.

You can enable users of computers that restart after installing this update.

This short article shows five ways to activate the Windows 10 Journal for Windows.

Video tutorial on opening log windows in Windows 10:

Five Ways To Open Log Windows In Windows 10:

Enter a day in the search field on the taskbar and make a decision accordingly e in the log window.

Go to the Start menu, click All Apps, click Open Windows and Accessories, select Windows Magazine.

Open This PC/Local Disk (C:)/Programs/Windows Magazine, but also double-click History.

The most common reason people check Windows logs is to troubleshoot system or application problems.

element

Here is the total uptime for troubleshooting security services, crashes, and service failures. The examples show how to diagnose the root cause of a problem based on the incidents in your logs. Be sure to read the warnings and errors for a general overview.

Security Log Events

The security log includes events related tosecurity, especially those related to certification and access. These logs may be the best place to look for unauthorized attempts to access your system.

The following events in the security log are particularly important:

Connected

These events include all successful login attempts that the system can trigger. Each event contains the following information:

Explanation of all possible event ID lookup fields for your log. For example, successful login attempts result in event ID 4624, which is detailed here. This example step shows a successful login event generated by the system being accessed when the login is created in the session.

Log name: Security

Source: Microsoft-Windows-Security-Auditing.

Date: 06/26/2019 4:32:47 AM ID: am

Event 4624

Task Category: Writing

Level: Information

Tags: audit success

User: N/A

Computer: EC2AMAZ-ES915Q9

Description:

The account has been successfully registered.

BUTSubject:

Security ID: NULL SID

Account Name:-

Account Domain:-

Login ID: 0x0

BUT

Identifiers:

Connection type: 3

Restricted Admin Mode:-

Virtual account: No

High Token: Yes

BUT

Impersonation Level: Impersonation

BUT

New registration:

SID: EC2AMAZ-ES915Q9\Administrator

Account name: Administrator

Account domain: EC2AMAZ-ES915Q9

Login ID: 0x2CA1ED0

Linked input ID: 0x0

Network account name:-

Network Account Domain:-

Login GUID: 00000000-0000-0000-0000-000000000000

BUT

Data processing:

Process ID: 0x0

Process Name:-

BUT

Network information:

Workstation name: EC2AMAZ-ES915Q9

Source Network Address:-

Port of origin: -

BUT

Authentication details:

Connection process: NtLmSsp

Authentication package: NTLM

Transferred Services:-

Package name (NTLM only): NTLM V2

Key length: 128