Do a regmon and save the .log file.
Open Excel and do a file open and select All file types.
Open the .log file.
Excel will see it a delimited txt file and start a wizard.
Select next and finish and now you have all the info in a spreadsheet.
Go to Data on the Excel menu and select Filter and then AutoFilter.
Now you can select the information you want by the filter. So if your looking for AccessDenied just select it in the filter list and you will only see those entries.
Comments