Jump to content











Photo
- - - - -

Win pe 3.0/3.1 - getting Event Viewer & Firewall MMC snapins to work.


  • Please log in to reply
10 replies to this topic

#1 DanPye

DanPye

    Member

  • Members
  • 31 posts
  •  
    United States

Posted 15 March 2012 - 03:27 PM

Hey,
Has anyone been able to get the event viewer & Firewall MMC snapins to work with Explorer shell? I have been scouring the web, and it appears to be something to do with the side by side configuration, but havent found any solution.

---


btw - this is a custom build, not winbuilder. (built from WAIK for Win 7 SP 1 & Win 7 SP1 source files)

Edited by DanPye, 15 March 2012 - 03:29 PM.


#2 DanPye

DanPye

    Member

  • Members
  • 31 posts
  •  
    United States

Posted 16 March 2012 - 10:57 PM

Well, I got a little farther.
I played with it a bit and got .net framework 2.0 & 3.5 working. I can now open the mmc console, event viewer but cannot see events. I went ahead and toyed with it a little.. tried copying the logs from a known good win 7 pc (almost clean) to the x:windowssystem32winevtlogs folder. Still wont use them or open them...

Also, get a little different error on Windows Firewall with advanced config.

Task scheduler opens, but gets message about cannot connect to pc Cant seem to create new tasks..

Anyone have any thoughts?

#3 Wonko the Sane

Wonko the Sane

    The Finder

  • Advanced user
  • 16066 posts
  • Location:The Outside of the Asylum (gate is closed)
  •  
    Italy

Posted 17 March 2012 - 02:26 PM

If the question is "how to view events", you may try this:
http://www.nirsoft.n...ent_viewer.html

No answers for the original questions, though :(.

:cheers:
Wonko

#4 DanPye

DanPye

    Member

  • Members
  • 31 posts
  •  
    United States

Posted 17 March 2012 - 11:59 PM

No, the question is how to get the event viewer working so that
1: you can open log files on the machine your working on from the PE disk.. (damaged, non bootable machine - event logs may contain clues on how to fix)
2: so you can troubleshoot issues on how to get other components working - if I am having problem with service or driver X under pe, the events written to the PE log might be of use.

#5 Wonko the Sane

Wonko the Sane

    The Finder

  • Advanced user
  • 16066 posts
  • Location:The Outside of the Asylum (gate is closed)
  •  
    Italy

Posted 18 March 2012 - 03:56 PM

Well, I am failing to see the difference between "view the event log of an offline Windows" (which is what the suggested tool can do) and "open log files on the machine your working on from the PE disk".
The suggested tool ADDITIONALLY allow you to save the log to different formats.

Sometimes reading the instructions does help:
http://www.nirsoft.n...ent_viewer.html

Reading External .evt files
MyEventViewer allows you to read event data from one or more .evt file by using /LoadFiles command-line parameter. For every .evt filename, you must specify the appropriate log type name (Application, Security, and so on...)

For example:
MyEventViewer.exe /LoadFiles "c:tempapp.evt" "Application"
MyEventViewer.exe /LoadFiles "c:tempsec.evt" "Security" "c:tempapp.evt" "Application"
MyEventViewer.exe /shtml "c:tempevents1.html" /LoadFiles "c:tempsec.evt" "Security" "c:tempapp.evt" "Application"


:cheers:
Wonko

#6 DanPye

DanPye

    Member

  • Members
  • 31 posts
  •  
    United States

Posted 19 March 2012 - 10:29 AM

I do see what you mean, but unfortunately, our IA shop doesnt want me to use an freeware software on the image (exception: I can use Java, Acrobat Reader & Flash Player) unless there is no other choice..

but I am mainly trying to get a Win pe 3.0 with explorer shell as fully functional as I can without using a build tool. (other than for reference)

Thanks
Dan

#7 Wonko the Sane

Wonko the Sane

    The Finder

  • Advanced user
  • 16066 posts
  • Location:The Outside of the Asylum (gate is closed)
  •  
    Italy

Posted 19 March 2012 - 11:07 AM

.... our IA shop doesnt want me to use an freeware software on the image ....

If that makes a difference I presume that you can pay for it :whistling:.
http://www.nirsoft.net/donate.html

What the heck is a "IA shop"? :w00t:

A shop in Iowa?
A shop dealing with Artificial Intelligence (but backwards, maybe Intelligent Artifacts)?

http://copycation.co...-hate-acronyms/
:frusty:


:cheers:
Wonko

#8 DanPye

DanPye

    Member

  • Members
  • 31 posts
  •  
    United States

Posted 20 March 2012 - 11:24 AM

IA = Information Assurance.
They are the ones that monitor the network, firewallls, etc ..

#9 DanPye

DanPye

    Member

  • Members
  • 31 posts
  •  
    United States

Posted 03 April 2012 - 02:54 PM

Well, sorry for the delay in replying.. was working on other things.

I got the firewall working along with the mmc snapin, but only after I start a whole bunch of services..

I am going to have to narrow it down a bit to see what servies (besides the firewall) have to be running in order for the mmc snapin to work (windows firewall with advanced config)

other question for anyone else out there.. is there a max size to Wim files? and is there a way to use the servicing option to thin out a wim some?

#10 DanPye

DanPye

    Member

  • Members
  • 31 posts
  •  
    United States

Posted 16 April 2012 - 12:10 PM

Ok, I have narrowed down what services are needed. Here are the lines that I use in my startnet.cmd file in case anyone else is interested.
---
net localgroup administrators SYSTEM /ADd
net localgroup administrators localservice /ADd
net localgroup administrators networkservice /ADd
wpeinit
Wpeutil enablefirewall

net start "CNG Key Isolation"
net start "Group Policy Client"
net start "Health Key and Certificate Management"
net start "Network List Service"
net start "Program Compatibility Assistant Service"
net start "System Event Notification Service"

---
after these are started, I can go into the Windows Firewall with advanced networking MMC plugin and work with the rules, etc..

#11 Filip Hasa

Filip Hasa

    Frequent Member

  • Advanced user
  • 408 posts

Posted 23 April 2012 - 02:15 PM

Hi DanPye,

did not you copy any file to your winpe?

You can use WAIK in winbuilder as well.

Thanks




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users