Windows 10: How can I "Un-Edit" default view in Custom Views of the Event Editor

Page 2 of 2 FirstFirst 12
  1.    12 Jun 2017 #11

    rkl122 said: View Post
    Perhaps someone else could confirm that the "three checks" template is the default
    pepanee said: View Post
    Yes, it is best if somebody else can also confirm that what they're seeing is also the same.
    As near-certain confirmation (still don't have my Win10 machine available), the checked boxes and description on my Win7Pro default Administrative View Properties appear to be identical to both of your Win10 examples:


    Click image for larger version. 

Name:	Win7ProDefaultAdminEventsViewProperties(inComputerMngmnt).png 
Views:	3 
Size:	102.2 KB 
ID:	139124



    rkl122 said: View Post
    ... I was so sure that when I first looked to edit that view, it had no check marks at all...
    @rkl122: Since you seem to have been recalling/expecting something that neither pepanee nor I are seeing, it is a bit difficult to replicate. But 2 possibilities occur to me:

    (1) I notice in your screenshot you have views named 'Administrative Events' and 'Administrative Events (1)', which I am able to replicate by copying 'Administrative Events' without assigning a new name, but 'Administrative Events' remains Read-Only, while 'Administrative Events (1)' is editable. Do they both have identical properties (e.g. checkmarks)? Is that by any chance part of the source of the original confusion (e.g., you edited out the checkmarks but didn't change the name)?

    (2) I wonder if you're recalling a different dialog window, which does in fact open with no checkmarks, at least on my Win7Pro machine (Action > Create Custom View...):

    Click image for larger version. 

Name:	CreateCustomViewDialog.png 
Views:	20 
Size:	21.5 KB 
ID:	139128


    From my reading of your posts (especially "when I first looked to edit that view"), possibility #2 seems more likely to me than #1.
      My ComputerSystem Spec

  2.    12 Jun 2017 #12

    gdv said: View Post
    .................
    (1) I notice in your screenshot you have views named 'Administrative Events' and 'Administrative Events (1)', which I am able to replicate by copying 'Administrative Events' without assigning a new name, .............
    I'd deliberately done the same thing hoping to replace the original with what I thought was the default filter, but as you found, that just creates the (1) version. Yes your possibility 2 is closer to the truth, which amounts to what I'm embarrassed to conclude is user brain malfunction. I didn't realize at first that the default custom view is completely read only and simply mis-remembered its configuration. (That MS would put a read-only template under "Custom" is perhaps questionable, but I guess they intended it as an example.)

    Thank you gdv for taking the time. Again my apologies for wasting it.
      My ComputerSystem Spec

  3.    13 Jun 2017 #13

    rkl122 said: View Post
    ...which amounts to what I'm embarrassed to conclude is user brain malfunction
    ...of course ya know you don't have any exclusive corner on brain malfunctions!

    rkl122 said: View Post
    (That MS would put a read-only template under "Custom" is perhaps questionable, but I guess they intended it as an example.)
    Certainly MS UIs don't always make perfect sense, but you got me thinking about that. I guess it qualifies as "Custom" because it (1) includes events from numerous pre-selected nodes on the Event Viewer tree (Application, Security, Hardware Events, etc.), and (2) limits the type of events displayed to Critical, Error, and Warning only, whereas all the other views on the tree include all Event Levels but for only one category each (Application, Security, Hardware Events, etc.). ...But that was probably already apparent to you, as you've clearly been using Event Viewer more than I have. (I.e., you probably didn't mean it should have been placed somewhere else in the tree.)

    I agree it makes a very useful example, and I imagine IT folks might especially appreciate it as-is, and also as a starting point for further customization. It includes a fairly complex selection of nodes from the tree, so having it be Read-Only seems like a good idea so it remains in its very useful default configuration.

    BTW (in case you haven't already thought of it), if you want to protect your own custom views from unwanted/accidental modification, I tested and verified that changing the file Properties > Attributes of the relevant .xml file (in C:\ProgramData\Microsoft\Event Viewer\Views) to Read-only will prevent the corresponding custom view from being modified from within Event Viewer.

    rkl122 said: View Post
    Thank you gdv for taking the time. Again my apologies for wasting it.
    You're welcome, but I don't at all feel my time was wasted. I like digging into problems like this both to try to help others, and for what I learn in the process. ...And I've learned a lot in the time I've spent on this one. I'll probably continue to use NirSoft's MyEventViewer for most of my quick Event Viewer needs, but now I have a much greater appreciation for the power and sophistication of the current MS Event Viewer (which I've mostly avoided since leaving WinXP) and how I might use it for particular problems in the future.

    Glad we both got it sorted out! ---Regards
      My ComputerSystem Spec


 
Page 2 of 2 FirstFirst 12

Related Threads
Hi :), I open Windows Event Viewer often (most days) to take a look for entries in the Windows 10 created Filter Custom Views> ServerRoles> Administrative Events. (especially as my Win 10Pro (x64) is newly installed)What I wish to seek advice on...
I have many folders that are Adobe Ill, Adobe Photoshop and Flexi with big files. I want to change the default view for my pictures folder including its sub folders, but not every folder because it slows it way down trying to come up with a icon...
Default Folder Views in Customization
Hi, could someone explain why the default for most folders and subfolders is the Icon view and why its so hard change that view to something else permanently? For instance My Pictures, you can right click My Pictures / customize / "optimize this...
how do I do this? for attempted troubleshooting a horribly slow black-screen boot situation I imported a worthless "custom view" in Event Logging. How do I undo that? countless MS articles on how to create and "work with" but none clearly say...
file edit view etc in Browsers and Email
Using Bing, can you get like file,edit, view? On internet exployer I got these by pressing Alt and right click at toolbars. thanks carol
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 16:23.
Find Us