Solved

Access is denied error when trying to access System Event Log.

Posted on 2002-05-17
14
3,367 Views
Last Modified: 2012-05-04
I'm getting this error when I try to access the System Event Log;
Unable to complete the operation on "System Log".
Access is denied.

I can access the Security Log fine, but the application log is causing the same error.

Anyone seen this before?

Its a windows 2000 domain controller and I'm logged in as the domain admin. There is another domain controller in the domain and I can access the Event Log on that fine.
0
Comment
Question by:tommyh
  • 4
  • 3
  • 2
  • +4
14 Comments
 
LVL 14

Accepted Solution

by:
AvonWyss earned 200 total points
ID: 7017381
No. The other logs work? You are logged in as administrator? Make sure that the event log file (C:\WINNT\SYSTEM32\CONFIG\SYSEVENT.EVT) does grant access to your user account.
0
 

Author Comment

by:tommyh
ID: 7017427
Interestingly, If I import the EVENT.EVT files for the logs that I can't open in the Event viewer, I can open them as saved logs.

The permissions on the files themselves are for Adminstrators and SYSTEM, Full control.
0
 
LVL 7

Expert Comment

by:jmiller47
ID: 7017456
Can you back up the logs somewhere else and delete the origianls. New logs will be created hopefully they will work again. If not, you can restore the originals.
0
 

Author Comment

by:tommyh
ID: 7017527
unfortunately these files are locked by the OS and I'm at a remote location so I can't boot into recovery mode and do anything to them.

0
 
LVL 7

Expert Comment

by:franka
ID: 7017590
you can delete them, if the eventlog service is stopped.
Here it is explained very detailed:

http://support.microsoft.com/default.aspx?scid=kb;DE;q172156
0
 

Author Comment

by:tommyh
ID: 7017601
Oddly, I opened the files you suggested directly in a text editor. And it started working again.

That wasn't exactly the type of result I wanted, because I like to be able to document the problem, cause and solution for others.

But thanks for your help anyway.

ps. I would have tried jmiller47's suggestion, but I was unable to get a chance, thanks for you help as well.
0
 

Expert Comment

by:CCNI
ID: 10883008
I had this same problem and found the resolution here.  You're gonna laugh at yourself like I did to myself.

Take "GUESTS" out of the members list.  

:-)
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Expert Comment

by:Rifaa
ID: 14513056
how you do this, guest account is not member for any users group nor administrator
i do have same problem still remain.

any comments/solution added to this would be highly appriciated
0
 

Expert Comment

by:Rifaa
ID: 14513073
HI,
here you go with microsoft artical for CCNI Reply, it did not help me out..
http://support.microsoft.com/?kbid=887439

i am still in hunt for answers for the same problem

thanks all
0
 

Expert Comment

by:Rifaa
ID: 14513166
Hi,
i have solved my problems :) thanks everybody
http://support.microsoft.com/default.aspx?scid=kb;en-us;892192


regards
0
 

Expert Comment

by:Rifaa
ID: 14513173
i find many people thier having many problems, related to event viewer please see this too,
may help you...

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/4decd119-819c-454b-aa33-91b301b5a4fa.mspx
0
 

Expert Comment

by:munequito
ID: 25634373
I followed instructions on the MS site (http://support.microsoft.com/kb/888189) on how to modify the registry and set RestricGuestAccess = 0 for the event logs, but that did not solve my problem. On a hunch, I then removed the user from the Guest group and the user WAS able to access the event logs.
0
 
LVL 7

Expert Comment

by:jmiller47
ID: 25635316
Is this the proper use of Open Discussion? This sounds like it should be a new question. I can imagine referring to this thread in the new question, but I don't believe that creating an open discussion on a question that has been closed for over 4 years will get you an answer very quickly.

Thanks,
Joel
0
 

Expert Comment

by:munequito
ID: 25719362
Sorry, I was just commenting on the solution...hoping my comment might help someone else. I did not have an additional question.
Best wishes,
Guy
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Login Vbscript not modifing registry settings as a non domain administrator 3 113
Recreate New ADC 1 272
Domain dunctional level. 4 313
Referencing a mapped drive 6 135
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Large Outlook files lead to various unwanted errors and corruption issues. Furthermore, large outlook files can also make Outlook take longer to start-up, search, navigate, and shut-down. So, In this article, i will discuss a method to make your Out…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now