You can access the service management
Before using the service, you must install it first:
Don't forget to specify the type of starting:
You could now choose the logon user account for the LogSched service. The default is the local system account, but if you want to access to remote resources, you should use a domain system account. You must specify the account with the format: DOMAIN\ACCOUNT. To start the service, the account must have the right Log on as a service.
If you have loaded the additional dll (MFC42.dll...) on your computer, you also need these files for the service.
In this case, I give you the advice that you'd better install the service in it own directory or the one of WDumpEvt to avoid conflict with your system dll.
You can check the state of the service at the top of this windows, or with
the service management, the name of the service is: Eventlog Scheduler
When you change the state of the service, it might take a little time,
especially if you stop the service during an action. The service will end the
action before stopping.
Before uninstalling the service, you must stop it first.
When you uninstall the service, you may choose to keep the executable or not. It is better to erase the file if you have copied it into the system directory, but not to erase it if you keep it in the WDumpEvt directory.
You can only delete the service executable if the event viewer is not open on the application log because it uses this file to decode the event description.
Don't forget to uninstall the service before uninstalling the WDumpEvt software, because Windows NT has no procedure to uninstall a service!
For each of these operations, an event is written in the application eventlog.