Link to home
Start Free TrialLog in
Avatar of ciooal
ciooalFlag for United States of America

asked on

Event Viewer responds with Access Denied Except for Enterprise Administrator

This is a new one on me and I can't find anything on Google or Microsoft, so here I am asking for help.

The situation is as follows.  Single Windows 2k3 Active Directory, 2003 Domain Functional Level, 2000 Forest Functional Level, 5 windows server 2003 servers; 3 Domain Controllers, two acting as Global Catalog Servers and one DC (non-GC) holding the FSMO Infrastructure role.  When I log in to any of the DC's with Domain Administrator, Schema Administrator, or Enterprise Administrator rights, I get an access denied error on all of the log files except Security.  The text of the error is "Unable to complete the operation on "Application".  Access is denied."  If I log in as the Forest Root Enterprise Admin I am able to view the files and read the files just fine.  Upon looking at the NTFS permissions on the .evt files I find the settings to be as follows (on the %windir%\system32\config directory):

Administrators:  Full Control
Authenticated Users:  List Folder Contents
Creator Owner:  No Explicit Allows or Denies
Enterprise Admins:  Full Control
Server Operators:  Modify
System:  Full Control

Any ideas?

Thanks,
Brent Doherty
ASKER CERTIFIED SOLUTION
Avatar of Brian Mulder
Brian Mulder
Flag of Netherlands image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial