How to install and manage the service

You can access the service management

Before using the service, you must install it first:

  1. Access the service management on a specific station or server:
  2. Then click on Install:

    Don't forget to specify the type of starting:

    You could now choose the logon user account for the LogSched service. The default is the local system account, but if you want to access to remote resources, you should use a domain system account. You must specify the account with the format: DOMAIN\ACCOUNT. To start the service, the account must have the right Log on as a service.

    If you install the service on a remote computer, you must copy the executable service file LogSched.exe to the remote computer by clicking the Copy executable in directory checkbox. If you install the service on the local station, you can choose to keep the executable on the WDumpEvt directory or to copy it to the system directory.

    Important

    If you have loaded the additional dll (MFC42.dll...) on your computer, you also need these files for the service.
    In this case, I give you the advice that you'd better install the service in it own directory or the one of WDumpEvt to avoid conflict with your system dll.

  3. And at last you must start the service via the same window, or via the service manager of the system.

Note

You can check the state of the service at the top of this windows, or with the service management, the name of the service is: Eventlog Scheduler
When you change the state of the service, it might take a little time, especially if you stop the service during an action. The service will end the action before stopping.

Uninstall the service

Before uninstalling the service, you must stop it first.

When you uninstall the service, you may choose to keep the executable or not. It is better to erase the file if you have copied it into the system directory, but not to erase it if you keep it in the WDumpEvt directory.

You can only delete the service executable if the event viewer is not open on the application log because it uses this file to decode the event description.

Don't forget to uninstall the service before uninstalling the WDumpEvt software, because Windows NT has no procedure to uninstall a service!

Note

For each of these operations, an event is written in the application eventlog.