Export (0) Print
Expand All

1.4 Relationship to Other Protocols

The EventLog Remoting Protocol Version 6.0 is dependent on RPC (as specified in [MS-RPCE]) for message transport.

The EventLog Remoting Protocol Version 6.0 is a replacement for the EventLog Remoting Protocol [MS-EVEN]. The EventLog Remoting Protocol Version 6.0 supports a number of new features not present in the original EventLog Remoting Protocol, such as query processing with filters, subscriptions, localized message support, and configuration support.

The EventLog Remoting Protocol Version 6.0 allows access to all the event logs accessible by the EventLog Remoting Protocol, plus some additional event logs not accessible via the EventLog Remoting Protocol.

The server-side dependency on the Local Security Authority (Domain Policy) Remote Protocol [MS-LSAD] is a shared-state dependency resulting from EventLog Remoting Protocol Version 6.0 depending on the Access Check algorithm pseudocode (as specified in Windows Data Types [MS-DTYP] section 2.5.3.2), which in turn depends on state in the Local Security Authority (Domain Policy) Remote Protocol.

Show:
© 2016 Microsoft