ciooal
asked on
Event Viewer responds with Access Denied Except for Enterprise Administrator
This is a new one on me and I can't find anything on Google or Microsoft, so here I am asking for help.
The situation is as follows. Single Windows 2k3 Active Directory, 2003 Domain Functional Level, 2000 Forest Functional Level, 5 windows server 2003 servers; 3 Domain Controllers, two acting as Global Catalog Servers and one DC (non-GC) holding the FSMO Infrastructure role. When I log in to any of the DC's with Domain Administrator, Schema Administrator, or Enterprise Administrator rights, I get an access denied error on all of the log files except Security. The text of the error is "Unable to complete the operation on "Application". Access is denied." If I log in as the Forest Root Enterprise Admin I am able to view the files and read the files just fine. Upon looking at the NTFS permissions on the .evt files I find the settings to be as follows (on the %windir%\system32\config directory):
Administrators: Full Control
Authenticated Users: List Folder Contents
Creator Owner: No Explicit Allows or Denies
Enterprise Admins: Full Control
Server Operators: Modify
System: Full Control
Any ideas?
Thanks,
Brent Doherty
The situation is as follows. Single Windows 2k3 Active Directory, 2003 Domain Functional Level, 2000 Forest Functional Level, 5 windows server 2003 servers; 3 Domain Controllers, two acting as Global Catalog Servers and one DC (non-GC) holding the FSMO Infrastructure role. When I log in to any of the DC's with Domain Administrator, Schema Administrator, or Enterprise Administrator rights, I get an access denied error on all of the log files except Security. The text of the error is "Unable to complete the operation on "Application". Access is denied." If I log in as the Forest Root Enterprise Admin I am able to view the files and read the files just fine. Upon looking at the NTFS permissions on the .evt files I find the settings to be as follows (on the %windir%\system32\config directory):
Administrators: Full Control
Authenticated Users: List Folder Contents
Creator Owner: No Explicit Allows or Denies
Enterprise Admins: Full Control
Server Operators: Modify
System: Full Control
Any ideas?
Thanks,
Brent Doherty
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.