Security Log file in Event Viewer

From: Michael B. - Taz (mbrady_at_conexis.com)
Date: 09/27/04

  • Next message: J: "W2k3 CA uninstall question" 
    Date: Mon, 27 Sep 2004 14:15:30 -0500

    Hello All!

    Let's start with what we have:
    60+ Servers in a mixed mode all running W2K or W2K3 (reason for mixed mode is some permissions issues with a trust)
    400+ PC's all running XP.

    Patched to the most current levels minus our XP machines that do not have SP2 installed due to a propietary app at the moment.

    The problem actually resides with in the Event Viewer. When I try to read the Security Log file on ANY [yes all the servers and all the clients] pc or server I receive the following error:

    Unable to complete the operation on "Security Log". A required privilage is not held by the client.

    Now I am unable to find anything in any log file about what the actual issue is. It is most likely sitting in the Security Log file but we have no way of reading it, or saving it for review.

    Has anyone seen this before?
    Is there a KB article on this that I'm just not finding?

    Any assistance is greatly appriciated. I seem to be finding lots of fun on this network...

    Kind Regard
    Michael B. -Taz

  • Next message: J: "W2k3 CA uninstall question"

    Relevant Pages

    • RE: Security Log Full
      ... I tried expanding the size of the log file, and clearing the log file, but ... message "The security log on the system is full" when you log on SBS. ... Properties, uncheck Success Audit under the Filter tab, and apply these ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • Re: Erratic access to network resources from service
      ... >> When things are working correctly, I see the expected logins from ... >> domain\computername$ in the security log of the servers. ... >> is running in the security logs of the servers. ... >> errors to refresh the credentials of the computer running the ...
      (microsoft.public.win32.programmer.networks)
    • Re: Reading Security Event Logs with Service Account
      ... account in the Domain Users group. ... the right pane will be Manage auditing and security log. ... then set that in the GPO for the OU where the servers are. ... I have a log aggregation application that uses WMI to monitor security ...
      (microsoft.public.windows.server.security)
    • Re: Security Event Log
      ... >I have a Windows 2000 SP3 server running IIS, ... >on that server and the Security Log file is growing to ... >of the Security event log file? ... Event Viewer, Right Click Security Log, Properties, set Maximum Log ...
      (microsoft.public.win2000.security)
    • 560 Audit Failure
      ... I am seeing the following event in the security log for all of our Win2k3 ... We use a security template to configure items like auditing events, ... I am not seeing the event in the Win2k servers. ...
      (microsoft.public.security)