Skip to content
Discussion options

You must be logged in to vote

Just tested in the virtual machine. Simply change the value of "Start" on the right side of [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System] to 1.

However, after looking at ADGuardHome and other software under [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application], I found that ADGuardHome calls %SystemRoot%\System32\EventCreate.exe to record logs. In fact, I think calling its own VMware\vmeventmsg.dll like VMWare is also a very good solution. I wonder if ADGuardHome will make such adjustments in the future...

Replies: 3 comments 1 reply

Comment options

You must be logged in to vote
0 replies
Comment options

You must be logged in to vote
1 reply
@SuXiChao1101
Comment options

Comment options

You must be logged in to vote
0 replies
Answer selected by SuXiChao1101
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants