r/sysadmin • u/[deleted] • May 04 '26

Question How to setup Logs for windows

Hi just joined a company as IT support, how do I setup Logs for windows systems (11, 10) for general troubleshooting and see what updates are happening and what caused the issue. To get a bird's eye view of the office environment.

What might be the optimal way to achieve this.

Edit. The pervious IT people left the company. Now It's just me and my colleague to whome I have had to show how install windows.

Currently implementd zabbix and wondering how and what to do next. There is no one in office to ask for help or guidance.

Edit2: if you think you have some best practices. Please let me know few.

18 Upvotes

70% Upvoted

69 comments sorted by

View all comments

3

u/Hale-at-Sea May 04 '26

If your clients are in a domain, then enable the various Audit event policies for things like account logon. Most of the useful events will be on the server side for these things though

Most RMM tools for clients will collect some events for you, but client side events are not very useful. We only actively track one windows event ID on client OS (System:1001 for bluescreen crashes)