Clear All Event Logs in Event Viewer in Windows  

Sure you, could mount the image file, then be able to access and open them as usual.

drugo said:

Hi
but if i open myeventview it points to the%SystemRoot%\System32\Winevt\Logs , and not to my image
need a program to open them

@drugo I think he means on the mounted image,
find C:\WINDOWS\System32\Winevt\Logs,
then you just double click the the log you want to view and Event Viewer should open up so you can read it.

When you mount it, make sure you give access to restricted folders, and make it writable(the writable only happens in memory and doesn't make any permanent changes).
***Note: Some logs are just plain empty.***

Here is a quick screen capture I just made to show you. It's not meant to be a video tutorial, but should give you an idea of how to do it, I hope it get's you further:)

***I just fixed the video a bit, and added a small explanation of what to do.***

You're welcome drugo!
I'm glad it helped.
You should be able to. I'm new at posting on YouTube, so if you can't, let me know what I need to set, so it can be.

@Brink,
Hey Shawn, I've been messing around now with the mounted Macrium image option for a bit.
Even though it say "Make writable Note: Changes are temporary and will be discarded", I have found out, you can copy from the mounted image, and paste into the "host".

This might come in useful to repair something, or get an installer(like maybe a driver or 3rd party program, you need to repair or reinstall without have to reimage and loose current updates and changes. I have successfully copy & pasted .dlls and other system files.

It might be worth a tutorial, for non invasive repairs. Or, would this be more of something, for the video geeks?

Cliff S said:

@Brink,
Hey Shawn, I've been messing around now with the mounted Macrium image option for a bit.
Even though it say "Make writable Note: Changes are temporary and will be discarded", I have found out, you can copy from the mounted image, and paste into the "host".

This might come in useful to repair something, or get an installer(like maybe a driver or 3rd party program, you need to repair or reinstall without have to reimage and loose current updates and changes. I have successfully copy & pasted .dlls and other system files.

It might be worth a tutorial, for non invasive repairs. Or, would this be more of something, for the video geeks?

Brink said:

@Cliff S, @Brink - Just an add-on... Same procedure can be used on a Restore Point. A small utility System Restore Explorer | Nics Blog can be used to mount a Restore Point. Copy/paste to host any file in the restore point, user data, system data, etc. Delete the Restore Point if desired. Just thought I'd pass it on. TC

Thank you. :)