RE: Accessing eventlogs remotely on W2K3 Server

From: Aditya [ Aditya Lalit Deshmukh ] (aditya_at_online.gateway.technolabs.net)
Date: 01/09/04

  • Next message: Simon Taplin: "Active Directory Question" 
    To: "Laura Robinson" <larobins@verizon.net>, <dwr3ck@hushmail.com>, <focus-ms@securityfocus.com>
Date: Fri, 9 Jan 2004 12:47:41 +0530

    yes that really rocks - kiwisyslog is what you can use with ntsyslog for sending the logging info - all can be on windows and there is a free version that you can download and evulate
    ntsyslog http://projects.sf.net/ntsyslog
    kiwisyslog http://kiwisyslog.com

    -aditya

    -----Original Message-----
    From: Laura Robinson [mailto:laurarobinson@earthlink.net]
    Sent: Thursday, January 08, 2004 4:17 AM
    To: dwr3ck@hushmail.com; focus-ms@securityfocus.com
    Subject: Re: Accessing eventlogs remotely on W2K3 Server

    We addressed this by configuring all of our event logs to log to a remote (Unix) syslog server. Might this be an option for you?

    Laura

    -----Original Message-----
    From: dwr3ck@hushmail.com
    Sent: Dec 30, 2003 10:50 AM
    To: focus-ms@securityfocus.com
    Subject: Accessing eventlogs remotely on W2K3 Server

    In shared web environments it is necessary to enable application owners
    to view the event logs on the IIS servers hosting their applications
    (minus the security log).

    This is easy to do in W2K server by having them use the run as command
    with the event viewer MMC from their machines with an account that has
    user privileges on the server (that DOES NOT have log on locally access
    etc).

    I have found one reference on the MS web site that indicates that you
    must be a local admin on the server to view event logs remotely.

    Has anyone else run into this? I need to provide real-time access but
    I cannot give the application owners local admin accounts. Also, enabling
    guest access to the logs is not an option.

    Concerned about your privacy? Follow this link to get
    FREE encrypted email: https://www.hushmail.com/?l=2

    Free, ultra-private instant messaging with Hush Messenger
    https://www.hushmail.com/services.php?subloc=messenger&l=434

    Promote security and make money with the Hushmail Affiliate Program:
    https://www.hushmail.com/about.php?subloc=affiliate&l=427

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ________________________________________________________________________
    Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Simon Taplin: "Active Directory Question"

    Relevant Pages