Chris:

Has the security event log more than 32767 event record(around 10 MB)?
If so then it is necesary to edit de evtquery.vbs file  replacing the CInt with CLng functions at rows 1700 and 1703.

Tiny -- Tiny-EPL ------------------------------------------------------------------------ Posted via http://www.mcse.ms ------------------------------------------------------------------------ View this thread: http://www.mcse.ms/message714909.html

Tiny,
That worked great. My security event log was at 11 MB and after modifying
those lines it was able to query without a problem. However I am running into
a problem. If modify the evtquery.vbs file it is regenerated back to its
original version by the OS. You can see this by deleting eventquery.vbs in
system32 or even deleting evtquery.vbs from dllcache. The files are
autorecreated.
Do I need to stop a service while doing this or is there a workaround other
than modifying evtquery and naming it something else?

Thanks in advance,
Todd

Show quoteHide quote

How to allow secure remote access
Administrator access problems
Sharepoint prompts for credentials
RPC Fails after applying SP1
Windows 2003 Server - SP4???
New servers dead! URGENT!!!
server 2003 sp1 is shutting down network cards
SSL certificates & Mobile phone access via Exchange Activesync
Wins server does not seem to listen on all ip addresses
Yet another licensing question