Re: Event Viewer Access Denied
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 28 Jan 2006 02:18:09 -0600
So you are saying that they can access and manage the security logs but not
the application or system logs from Computer Management. This may be a long
shot but look in the Local Security Policy of the server for security
options and check the option for network access: remotely accessible
registry paths to make sure that System\CurrentControlSet\Services\Eventlog
is shown. If that does not help if someone is good at using a packet
sniffer you might want to use netmon on the server to try and capture the
packet sequence for when a user tries to access the system/application log
and is denied as often you will find helpful information if you look at the
packets involved though you will have to look at the details in depth of
each packet. --- Steve
"Chris Schneider" <ChrisSchneider@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:8D02A596-93C1-43BF-A9F3-6450320FFB17@xxxxxxxxxxxxxxxx
>I have am getting Access Denied message when trying to open the System and
> Applicaiton event logs only when connecting in via Computer Management
> Remotely. Works fine if logging in with the power users account locally
> to
> the server. No users are members of the Guest Group. I have granted the
> policy to allow power users to manage logs as well as rights over the
> folders
> and registry.
>
> We are assigned Local Power Users to be able to manage the event logs.
> Securty logs work fine.
>
> I am at a loss since the power users can login locally to the server or
> via
> RDP and manage the logs just fine..
>
> Any help would be greatly appreciated.
.
- Prev by Date: Re: Svchost and server not responding
- Next by Date: Re: event log errors
- Previous by thread: event log errors
- Next by thread: Netlogon /Sysvol
- Index(es):
Relevant Pages
|
