Re: Event Log Access

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 07/08/05 

Date: Fri, 8 Jul 2005 16:13:02 -0500

Boy is that bizarre in that you can access the security log but not the
application or system log. There is an outside chance that they are corrupt
and clearing the logs may help but I would back them up first just in case
there is anything important in those logs and you would be prompted to do
such before you cleared them. The problem would not be network related if
you can access the security log. The other things I would check is
permissions to the .evt logs to make sure you do not have any deny
permissions to them and that administrators/system have full control and the
permissions on the registry keys for those logs which are located at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\application
and ...system . --- Steve

"Steve Harclerode" <Lizard.That.Was@hot.mail.com> wrote in message
news:%23%23eZZ8$gFHA.2372@TK2MSFTNGP14.phx.gbl...
>I can access the Security log, but not the System or the Application log.
>I'm a member of administrators, power users, remote desktop users, and
>users.
>
> And yes, I'm logging on remotely with Terminal Services from Win2K box.
>
> I'll have to ask the admin guy Monday if he can access the Event Log.
>
> Thanks,
> Steve
>
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
> news:OwdrX3$gFHA.2632@TK2MSFTNGP09.phx.gbl...
>> No that is not a common problem. Is this happening to everyone including
>> the built in administrator account? Are you logging on locally or trying
>> to do this remotely? The guests group can be denied access to the
>> application log but it would be unusual for you to be a member of the
>> gusts group but you should have your user account membership reviewed.
>> The command net user username is an easy way to do such. Can you access
>> any log - system or security for example? --- Steve
>>
>>
>> "Steve Harclerode" <Lizard.That.Was@hot.mail.com> wrote in message
>> news:u5Nuxy$gFHA.3164@TK2MSFTNGP15.phx.gbl...
>>> Hi,
>>>
>>> I'm trying to look at the Application event log on a Windows 2003 server
>>> using the Event Viewer. The account I'm using is a member of the local
>>> admin group. I'm getting an error:
>>>
>>> Unable to complete the operation on "Application". Access is Denied".
>>>
>>> Is this a common problem? What could our administrator change to allow
>>> me access to those logs?
>>>
>>> Thanks,
>>> Steve
>>>
>>
>>
>
>

Relevant Pages

  • Re: Tracking unauthorized access to my computer
    ... Remote Desktop. ... The user name, logon type, and time can give you an idea who is ... Also look at your own logon events for your user account ... I would also increase the size of the security log to like ...
    (microsoft.public.security)
  • Re: your account is configured to prevent you from using this computer
    ... might be one of their recent updates that caused this. ... >if it was then it may still think it is a member of a ... >> I did verify that the security log is configured ... >> incorrect password and I did come up with an event on ...
    (microsoft.public.windowsxp.security_admin)
  • Re: your account is configured to prevent you from using this computer
    ... if it was then it may still think it is a member of a domain if it is not ... does not help I would do an upgrade installation by using the install cdrom ... > I did verify that the security log is configured ... > incorrect password and I did come up with an event on the ...
    (microsoft.public.windowsxp.security_admin)
  • Access denied while reading Security log
    ... I'm trying to access the security log on a remote computer. ... My code works for the application log, but not for security log. ... The remote user is member of the administrators group and additionally has the "Manage audit and Security Log" user right. ... What is the C++ COM/WMI equivalent to ...
    (microsoft.public.win32.programmer.wmi)
  • Event viewer: Security Log - IP tracking
    ... security log to indicate the IP of computers denied access, ... Machine name is useless when the login attempts are remote. ...
    (microsoft.public.security)
Quantcast