What's new ?
Save and erase
View an events list
Scheduling an action
Service management
Registration form

How to install and manage the service

You can access the service management

  • By clicking the button of the toolbar.
  • By the context menu of a station object to have the state of the service for the selected station.
  • By the context menu of the tray icon to have it for the local computer.

Before using the service, you must install it first:

  1. Access the service management on a specific station or server:
  2. Then click on Install:

    Don't forget to specify the type of starting:

    • Automatic (the service starts automatically on each reboot)
    • Manual (allow the startup manually)
    • None (prevent the startup)

    You could now choose the logon user account for the LogSched service. The default is the local system account, but if you want to access to remote resources, you should use a domain system account. You must specify the account with the format: DOMAIN\ACCOUNT. To start the service, the account must have the right Log on as a service.

    • To add it to this user on Windows NT 4, you must open the user manager for the remote computer, Policies menu, choice User Rights. Check Show Advanced Users Rights, Select the right Log on as a service and add the user.

    • To add it to this user on Windows 2000, You must launch the tool Local Security Policy (control panel -> Administrative Tools), and choose Local policies -> user rights and add the user to the right Log on as a service.

    If you install the service on a remote computer, you must copy the executable service file LogSched.exe to the remote computer by clicking the Copy executable in directory checkbox. If you install the service on the local station, you can choose to keep the executable on the WDumpEvt directory or to copy it to the system directory.


    If you have loaded the additional dll (MFC42.dll...) on your computer, you also need these files for the service.
    In this case, I give you the advice that you'd better install the service in it own directory or the one of WDumpEvt to avoid conflict with your system dll.

  3. And at last you must start the service via the same window, or via the service manager of the system.


You can check the state of the service at the top of this windows, or with the service management, the name of the service is: Eventlog Scheduler
When you change the state of the service, it might take a little time, especially if you stop the service during an action. The service will end the action before stopping.

Uninstall the service

Before uninstalling the service, you must stop it first.

When you uninstall the service, you may choose to keep the executable or not. It is better to erase the file if you have copied it into the system directory, but not to erase it if you keep it in the WDumpEvt directory.

You can only delete the service executable if the event viewer is not open on the application log because it uses this file to decode the event description.

Don't forget to uninstall the service before uninstalling the WDumpEvt software, because Windows NT has no procedure to uninstall a service!


For each of these operations, an event is written in the application eventlog.

Updated 09/14/2000
© Isabelle Vollant (