How to run Event Viewer on WinPE7 ?

Hi there,

I used WinBuilder tool (WinPE7 project) to build ISO for Windows PE 7 32 bit. The problem is I am not able to open Windows Event Viewer on this WinPE (see screenshot)



I also tried to install MMC 3.0 but it says it is not enough space to install, not sure what goes wrong.



Could you please lighten me up? Thanks a lot!

Hello,
i use bing.translator ....
if i well understand you .... if not, sorry.

Fisrt, your drive x: seems toot little : 119Mo ! Can you extend it with dism   /Set-ScratchSpace   ?
And why use winpe7 in 2016 ?

In MicroWinpeBuilder for windows10 ( http://theoven.org/index.php?topic=1639.0 )  which is a tool has educational purposes, I explain briefly how to use the service 'Windows event log' in winpe.
I use the following mechanism since winpe for XP.
It assume the service eventlog and mmc are ok in winpe. You must verify these 2 points for winpese7.
In MicroWinpeBuilder, the postDemarrageWinpe.ps1 script that is launched when winpe started performs the following actions:
- stop the enventlog service
- change the name of the key "hklm\system\currentcontrolset\control\minint" in "minint_sav"
- start the eventlog service
- wait a little time
- change the name of the "hklm\system\currentconfig\control\minint_sav" in "minint" key

The event log is then accessible with eventvwr.exe and eventvwr.msc.
You can read the messages stored at winpe startup. New events will be rare but there are.
Depending on the contents of the "...services\eventlog\application" key messages will be more or less readable.

However, there are few events which will then be recorded.

I hope that you can be tested with winpe7
Nice day

Hi,

Thank you so much for your reply with instructions.

I still have some questions, sorry I am still newbie and it might be some kind of silly questions...

1. "your drive x: seems toot little : 119Mo ! Can you extend it with dism   /Set-ScratchSpace"
--> I am using WinBuilder10 with WinPE7 project, can you please show me how to do this? Do we have a script that can be attached and run on WinBuilder10 tool? it seems that I have to use this command: dism.exe /Image:<path to image file> /set-ScratchSpace:512 but I am not sure what image file should be...

2. "In MicroWinpeBuilder, the postDemarrageWinpe.ps1 script that is launched when winpe started performs the following actions"
--> I do not see any script named "postDemarrageWinpe.ps1" in "MicroWinpeBuilder", can you double check?

3. "It assume the service eventlog and mmc are ok in winpe. You must verify these 2 points for winpese7."
--> I do not see "MMC" service on WinPESE7, only "Event Log" available

Thank you again

Hi,

Sorry for the delay (i don't receive notification). My English is bad, i'm french and use bing.translator. I'm old but always newbie.

for "ScratchSpace" :
 - Yes winpese/winbuilder has a menu to enlarge the scratchspace up to 512 MB with winpe10: menu "build/2 - shell & config/Fbwf cache size"
 - I don't know if winpese/winbuilder has a menu to launch a command

note : scratchSpace is a part of the RAM. Two possibilities to define its size. First its size is automatically set based on the size of the RAM. With 512 MB of RAM there is little room for scratchSpace. Or, secondly, its size is defined by a registry value that dism/set-scratchSpace can change.

for "PostDemarrageWinpe.ps1": this file is product only when you start "microwinpebuilder". For the eventlog, please see the variable $postEventlog in the script "traitement.ps1". It's only a PowerShell translation of what i say about the service "eventlog".

for "mmc" : i don't how is it possible to launch eventvwr.msc without mmc.exe (mmc is not a NT service but i don't know the good word in English) . Even eventvwr.exe use mmc for display the event log. I don't know winpese7

Please, would you tell me why are you using winpe7 and not winpe10 if yours PC have more 2Go of RAM?

note: microwinpewinbuilder need a 'long' preparation with the download and installation of AIK, the need to 'dism /mount-wim /wimfile:install.wim'. But it is easy to modify all you want by modifying a PS script. You can add the result of your investigation in winpe. Actually, i try to add remote PowerShell.

Kind regards.