Please if someone can help me with one or more of these questions. -In vista sp1,still, exists folder: c:\windows\system32\LogFiles\WMI\RTbackup -It is a method tosee what user/group have permissions onc:\pagefile.sys? - group eventlog are not present (computer management\local user and group name) What is the role of these user/group? -AfterI access computer management/Event View, appears 4 folders: Custom view, Windows logs, Aplication and services log, saved logs, subscriptions Whatis the role of"subscriptions" and "saved logs" The events from each folder areautomaticaly registered or I have to do any settings? Ex: events from "system" from "Windows logs" or from.. from "Applications and services log"Thank you very much!

Hi,Lots of questions you have there 1. You get denied because you do not have access.2. System volume information is where the operating system stores the restore points.3. TrustedInstaller is a hard-coded username that is used to install windows updates. Its permissions are automatically defined during installation. You cannot manually add TrustedInstaller.4. I do not understand the question, please rephrase.

Thank you for your informations. Your informations was useful for me. Please If you can helpme, again!(sorry!), with point 1 and 4: 1 It is a posibility to have permission to this files? 4 After I access Event view from computer management, appears 4 folders: Custom view Windows logs Aplication and services log saved logs subscriptions -Events describe from this folder are implicit registered after I install Vista or I have to do some settings? Ex events describe by "system" from "Windows Logs" or events describe by... from "Aplication and services log"?

Hi,1. You can try taking ownership with the takeown command4. Events are reported in event viewer automatically after you finish the windows installation.