Re: Access is Denied to Event Viewer logs

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/27/04


Date: Wed, 27 Oct 2004 18:25:06 GMT

That is darn curious, particularly that the administrator can access the
security log but not the others. You might try the procedure in the link
below also. Other than that I am out of ideas. Make sure that the problem
server points ONLY to the other domain controller as it's preferred dns
server in tcp/ip properties. Dns problems can cause a lot of strange issues.
Try viewing the system and application logs from the other server [use
Computer Management - action/connect to another computer ] to see if that
can be done and maybe you will see some pertinent info. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;172156

"Aaron Young" <AaronYoung@discussions.microsoft.com> wrote in message
news:3AA85561-4C8A-473B-9A1F-40C8AA343708@microsoft.com...
> Hi Steven,
>
> I am afraid the hotfix didn't resolve the problem.
>
> There are two W2000 Domain Controller Servers. The Event Logs can be
> accessed by the Administrator without problem on one of the servers while
> the
> other server reports accessed denied.
>
> The problem started immediately on the second server when it was promoted
> to
> a Domain Controller. I have since demoted it but the event log access
> problem
> remains.
>
> I am ready to shoot it out the window!!!
>
> Regards,
>
> Aaron
>
>
> "Steven L Umbach" wrote:
>
>> You still might be able to clear the logs if the problem is corruption.
>> Sometimes the error messages that you get are a bit deceptive and generic
>> and may not actually be a permission problem. Did this just start
>> happening
>> suddenly? What is the operating system of the computer and domain
>> controller
>> if in a domain? Is this happening on just one domain computer, domain
>> controller, or all? The link below may be pertinent. --- Steve
>>
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;829246#kb1
>>
>> "Aaron Young" <AaronYoung@discussions.microsoft.com> wrote in message
>> news:A8B79EE7-2FE7-4D40-954E-61647C1395CF@microsoft.com...
>> > Hi Steven,
>> >
>> > I am afraid that I don't have access to the logs to be able to save
>> > them.
>> > I
>> > think the problem is more a security issue than a corruption problem.
>> >
>> > Thanks anyway.
>> >
>> > Regards,
>> >
>> > Aaron
>> >
>> > "Steven L Umbach" wrote:
>> >
>> >> First try to clear the logs in case they are corrupt. You will be
>> >> given
>> >> the
>> >> option to save the log to a file if it contains important
>> >> formation. ---
>> >> Steve
>> >>
>> >>
>> >>
>> >> "Aaron Young" <Aaron Young@discussions.microsoft.com> wrote in message
>> >> news:685772DE-422D-4165-8D80-B361BCD19D51@microsoft.com...
>> >> > Hi,
>> >> >
>> >> > I don't know what has happened but the Administrator is not able to
>> >> > view
>> >> > the
>> >> > logs in the Event Viewer except the Security log. When any of the
>> >> > logs
>> >> > are
>> >> > selected (the Application log in this example), the message "Unable
>> >> > to
>> >> > complete the operation on 'Application'. Access is denied".
>> >> >
>> >> > Any help on this will be greatly appreciated!!
>> >> >
>> >> > Regards,
>> >> >
>> >> > Aaron Young
>> >>
>> >>
>> >>
>>
>>
>>



Relevant Pages

  • FW: Trace of 139 attack?
    ... administrator logins to be locked out after 3 attempts, ... attack, unless you're running terminal server, in which all logins are ... For example, passprop.exe allows the Administrator ... > deleting the logs he cannot do it. ...
    (Focus-Microsoft)
  • Re: Add Licence Wizard
    ... Yes I am using the Administrator account but having checked the groups it ... occurs at the end of the small business set up wizard in the closing box ... Server Tools - Administration ... The error logs are present and are fairly long I will try the wizard ...
    (microsoft.public.windows.server.sbs)
  • Re: Add Licence Wizard
    ... I've just been checking the service pack etc. ... Yes I am using the Administrator account but having checked the groups ... > Server Tools - Administration ... The error logs are present and are fairly long I will try the wizard ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Server 2003 VM joining a domain RPC fails
    ... on the domain controller I see some Security Audit ... logs that show a Authentication Ticket sent at the time i try to join ... Terminal Server. ...
    (microsoft.public.windows.server.general)
  • Re: auto login & run programs
    ... Microsoft Certified Professional [Windows 2000] ... | Im running a 2003 Server and require 2 programs to start on bootup The | problem is the server will be remotely administered. ... | I also need to make sure the username is not used remotely otherwise the | programs will try to run each time someone logs in. ...
    (microsoft.public.windows.server.general)