Hi Jerry, tried to playing around with eventlogs but: smb.conf global part: eventlog list = SyslogLinux In your Samba-EventLog-HOWTO.txt: When Samba initially starts, it looks to see if the eventlog directory, and a particular log exists; if not, the directory and file are created under LOCK_DIR This is not the case, no directory and file was created. In the docs for smb.conf: eventlog list (G) This option defines a list of log names that Samba will report to the Microsoft EventViewer utility. The listed eventlogs will be associated with tdb file on disk in the $(libdir)/eventlog. Mmmh: LOCK_DIR or $(libdir)? Nobody of them :( Debuglevel 5 shows: [...] doing parameter eventlog list = SyslogLinux [...] [2006/02/15 16:24:56, 5] tdb/tdbutil.c:tdb_log(772) tdb(unnamed): tdb_open_ex: could not open file /var/lock/samba/registry.tdb: No such file or directory [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM/SOFTWARE] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE/Microsoft] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft/Windows NT] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft\Windows NT/CurrentVersion] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion/Print] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print/Printers] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion/Ports] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM/SYSTEM] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM/CurrentControlSet] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet/Control] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Control/Print] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet/Services] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services/LanmanServer] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer/Shares] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services/Eventlog] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion/Perflib] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib/009] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Control\Print/Monitors] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Control/ProductOptions] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Control/Terminal Server] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server/DefaultUserConfiguration] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services/TcpIp] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp/Parameters] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services/Netlogon] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon/Parameters] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKU] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKU] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKCR] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKCR] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKPD] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKPD] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKPT] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKPT] [...] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog/SyslogLinux] [2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(59) Adding key of [SyslogLinux] to path of [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(66) Adding key of [SyslogLinux] to path of [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux] [2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux/SyslogLinux] [2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(85) Storing values to eventlog path of [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux] [2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(138) Storing values to eventlog path of [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux\SyslogLinux] der tom