Security Logs Access Denied
Results 1 to 2 of 2

Thread: Security Logs Access Denied

  1. #1
    Junior Member
    Join Date
    Jan 2005
    Posts
    5

    Lightbulb Security Logs Access Denied

    I am looking for a possible solution to a ongoing problem I have been facing.

    I have two w2k servers (SP4) that are not allowing me to view the Security Logs (event logs).

    I receive the error message "a required privilege is not held by the client" when attempting to access the security logs.

    I have verified local group policy and domain gp and ensured the local and domain administrator is allowed access to these logs. Is there anything else that could allow access to these areas. I am able to view all other event log topics except security.

    I am able to boot the server using my ERD Commander disk and then copy the security event log to another folder. After restarting the server, I can open file and view all events without an issue. While this option does exist, it is a pain to schedule an outage and bring a server down for 5 minutes.

    All items on Microsoft's website and google indicate ensuring I have permissions set in the gp module should be enough.

    Any thoughts would be appreciated
    Bang Head Here ( )

  2. #2
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    While you may have set the policy to allow yourself to view the logs you need to make sure that your account has permissions to the:-

    %systemroot%/system32/config

    folder. The policy is over-ridden by the NTFS permissions.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides