Re: Security Log file in Event Viewer

From: andy d (ajd777_at_hotmail.com)
Date: 10/04/04

  • Next message: Andrei Ungureanu: "RE: Disable NetBIOS and NTLM on Windows 2003 Domain Controllers and Ex" 
    Date: Mon, 4 Oct 2004 15:38:47 +0100

    "Michael B. - Taz" <mbrady@conexis.com> wrote in message
    news:%23OjziZMpEHA.1152@TK2MSFTNGP11.phx.gbl...
    Hello All!

    Let's start with what we have:
    60+ Servers in a mixed mode all running W2K or W2K3 (reason for mixed mode
    is some permissions issues with a trust)
    400+ PC's all running XP.

    Patched to the most current levels minus our XP machines that do not have
    SP2 installed due to a propietary app at the moment.

    The problem actually resides with in the Event Viewer. When I try to read
    the Security Log file on ANY [yes all the servers and all the clients] pc or
    server I receive the following error:

    Unable to complete the operation on "Security Log". A required privilage is
    not held by the client.

    Now I am unable to find anything in any log file about what the actual issue
    is. It is most likely sitting in the Security Log file but we have no way
    of reading it, or saving it for review.

    Has anyone seen this before?
    Is there a KB article on this that I'm just not finding?

    Any assistance is greatly appriciated. I seem to be finding lots of fun on
    this network...

    Kind Regard
    Michael B. -Taz

    Hi Michael,

    Does this occur when logged on locally at the machine and connecting to the
    local event log? If yes, does this still happen when logged in using the
    local administrator account for the machine?

    If you are using administrator accounts and locally viewing the security
    still does not work you may want to look at the group policies to ensure
    they are not restricting log access.

    >From memory normal users can view all logs on local and remote PC's EXCEPT
    the security log. But by default the administrator account should be able to
    read the security log.

    Let me know what you find.

    Cheers

    Andy

  • Next message: Andrei Ungureanu: "RE: Disable NetBIOS and NTLM on Windows 2003 Domain Controllers and Ex"

    Relevant Pages

    • RE: Security Log Full
      ... I tried expanding the size of the log file, and clearing the log file, but ... message "The security log on the system is full" when you log on SBS. ... Properties, uncheck Success Audit under the Filter tab, and apply these ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • Security Log file in Event Viewer
      ... When I try to read the Security Log file on ANY [yes all the servers and all the clients] pc or server I receive the following error: ... Unable to complete the operation on "Security Log". ... Now I am unable to find anything in any log file about what the actual issue is. ...
      (microsoft.public.windows.server.security)
    • Re: Security Event Log
      ... >I have a Windows 2000 SP3 server running IIS, ... >on that server and the Security Log file is growing to ... >of the Security event log file? ... Event Viewer, Right Click Security Log, Properties, set Maximum Log ...
      (microsoft.public.win2000.security)
    • Re: Event Log
      ... at startup stating "Security Log is Full...." ... which requires that I login as administrator to clear the ... In the Properties for the log file (right-click the log file in the ...
      (alt.os.windows-xp)