Re: Remote access to event logs

From: Eric Fitzgerald [MSFT] (ericf_at_online.microsoft.com)
Date: 08/22/05 

Date: Mon, 22 Aug 2005 08:37:08 -0700

You should be very careful giving anyone access to \config - this not only
holds your event log files but also your registry- you might have just given
those users the ability to get to your SAM password hashes, service
configuration database (containing service account passwords), and so forth.

Eric 

-- 
This information is provided "AS-IS" with no warranty, and confers no 
rights.
"Bryan E Fairchild" <Bryan@NeotericIT.com> wrote in message 
news:88C82999-A61D-43B6-8500-33B084F6ED4A@microsoft.com...
> Thanks for the responses, but I was able to find a solution. I created a
> share at c:\windows\system32\config removed the everyone group and gave 
> the
> other group read access. Then this "other" group was able to connect 
> remotely
> from their machine's Event Log window. yay
>
> -- 
> Regards,
> Bryan Fairchild
> -----------------
> NeotericIT.com
> Of recent origin; modern. The development, installation, and 
> implementation
> of computer systems and applications.
>
>
> "keith" wrote:
>
>> I would look at something like MRTG or there are some utils like 
>> eventsentry
>> light (http://www.netikus.net/products_downloads.html?SESSION=$session) 
>> also
>> some resource kit tools might help.
>>
>> Hope this helps
>>
>> Cheers
>> Keith
>>
>> "Bryan E Fairchild" <Bryan@NeotericIT.com> wrote in message
>> news:C9EF6DD7-0C8D-4036-B065-F7DA245BD4D9@microsoft.com...
>> > Does anyone know how to give users remote access to the event logs on a
>> > Win2003 server without adding them to the administrators group?
>> > -- 
>> > Regards,
>> > Bryan Fairchild
>> > -----------------
>> > NeotericIT.com
>> > Of recent origin; modern. The development, installation, and
>> > implementation
>> > of computer systems and applications.
>>
>>
>>

Relevant Pages

  • Re: Remote access to event logs
    ... "keith" wrote: ... >> Bryan Fairchild ... >> of computer systems and applications. ...
    (microsoft.public.security)
  • Re: I cant install any Nortons Software
    ... thing and disabled the firewall. ... I get MSIInstaller errors in the Event Log ... > antispyware applications and passive immunizations from those applications ... > Cleaned with any antispyware products or scanned with any online-AV ...
    (microsoft.public.security)
  • Re: Exception Logging in C#
    ... coupled applications doing level 2 to level 5 controls. ... being written by third party customer consultants or the actual customer ... logging system for the process alarms but used the event log for system ... both in design and in implementation. ...
    (microsoft.public.dotnet.languages.csharp)
  • Perflib Event ID 1016
    ... the event log. ... This may cause problems for applications that are trying to read the ... performance data buffer. ... Contact the manufacturer of this library or service ...
    (microsoft.public.windows.server.sbs)
  • Event Log Entries
    ... MSG file for the messages associated with the Event Log entries created by ... our applications written in C++ 6 and earlier. ...
    (microsoft.public.dotnet.languages.csharp)
Quantcast