[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [hobbit] Looking for sample BBWIN configs for filtering Windows event logs
- To: "hobbit (at) hswn.dk" <hobbit (at) hswn.dk>
- Subject: RE: [hobbit] Looking for sample BBWIN configs for filtering Windows event logs
- From: "Storer, Raymond" <storerr (at) nibco.com>
- Date: Fri, 10 Oct 2008 17:13:33 -0400
- Accept-language: en-US
- Acceptlanguage: en-US
- Cc: "hobbit (at) elyograg.org" <hobbit (at) elyograg.org>
- References: <A3D12FAD74FC8B46991703F40C182BAB01078343 (at) permls102.wde.woodside.com.au> <gcl09s$f4n$1 (at) voodoo.hswn.dk> <EC70BBBBD43A8B468D2460FE1CFAAA26151967BE (at) EX1.nibco.com> <48EE4539.6020704 (at) elyograg.org> <d4f70c240810091212pd8290b5le3f9d3ac0323729b (at) mail.gmail.com> <48EE63CE.2020203 (at) elyograg.org> <d4f70c240810091558u752ad908h1c00e88d33297189 (at) mail.gmail.com> <48EF93E5.8050300 (at) elyograg.org>
- Thread-index: Ackq/4csDPEs/4HlToynet2YDi9eCAAHNxqw
- Thread-topic: [hobbit] Looking for sample BBWIN configs for filtering Windows event logs
Shawn, you can configure Terminal Services to turn off printer redirection. It can be done in a group policy object (GPO) or it can be done to each server individually.
See this link for a more visual discussion on the subject:
http://blogs.technet.com/askperf/archive/2007/08/24/terminal-server-and-printer-redirection.aspx
Ray
----Original Message----
From: Shawn Heisey [mailto:hobbit (at) elyograg.org]
Sent: Thursday, October 09, 2008 1:54 PM
To: hobbit (at) hswn.dk
Subject: Re: [hobbit] Looking for sample BBWIN configs for filtering Windows event logs
> Here's our typical list:
>
> <ignore logfile="System" eventid="2" />
> <ignore logfile="System" eventid="3" />
> <ignore logfile="System" eventid="4" />
> <ignore logfile="System" eventid="8" />
> <ignore logfile="System" eventid="1106" />
> <ignore logfile="System" eventid="1111" />
> <ignore logfile="Application" eventid="3033" />
> <ignore logfile="Application" eventid="2003" />
>
> ID 3033 is an Exchange message relating to Windows Mobile clients, but
> because Exchange was the first server I converted to BBWin from Big
> Brother, it's ended up on all of the systems. ID 2003 is related to
> performance counters. It's probably possible to fix, but my focus
> is not so much on the Windows infrastructure.
>
> The rest are the annoying printer driver entries that you get when you
> log into a machine via Remote Desktop and are forwarding printers but
> don't have drivers on the system. I tried for a long time to get
> people to turn off printer forwarding, because I could never get Big
> Brother to stop alarming, but nobody listened. Hobbit/BBWin has been
> a lifesaver in this respect. With a little more work, we will be able
> to soon include the NOC in all alarms. With Big Brother, msgs
> was a flood of crap and would have overwhelmed them.
>
> I have a question that's really more suited for the BBWin mailing
> list, but I've asked it there and gotten no response: Does anyone
> have a complete server-side configuration example for BBWin clients,
> showing how to handle all aspects of the client configuration?
>
> Thanks,
> Shawn