## Removable Storage Service

Seen on:
* Windows 2000
* Windows XP 32-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>Removable Storage Service</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\NTMSEVT.DLL</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows 2003
* Windows XP 64-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>Removable Storage Service</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\ntmsevt</td>
    </tr>
  </tbody>
</table>

&nbsp;