windows 2003 server access denied on event viewer

i just recently ad a w2k3 server in my w2k domain i did all the step to change a w2k domain to w2k3 domain and now my w2k3 server is a DC.

on my w2k server i can see all the events in event viewer

on my w2k3 server i only can see the Security the reste are access denied and as a red cross on it.

im logon as administrator and yes it's part of domain admin and enterprise admin.

not memeber of any guest group
RosebelAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

gg234Commented:
Greetings Rosebel,

Verify the account is not a member of a group which would be denied access
to the Event Viewer, such as the Guests group (some Admins mistakenly add
their account to all groups, thinking it will give them more access
privileges on their machine or domain).  If this doesn’t work, boot the
recovery console and delete the event logs from \system\config.  They should
be rebuilt with proper permissions when you restart normally.


hope this helps
RosebelAuthor Commented:
when i demote the w2k3 server and put it as a stand alone server the event viewer is okay and when i put it back as a DC with dcpromo it goes access denied again
RosebelAuthor Commented:
CAUSE
This problem occurs if the Domain Users group is a member of the built-in Guests group. By default, the built-in Guests group does not have access to the event logs.
RESOLUTION
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

If your computer is a domain controller, follow these steps to resolve this problem:
1.      Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2.      In the left pane, expand the domain name, and then click Builtin.
3.      In the right pane, double-click Guests, and then click the Members tab.
4.      In the Members list, click Domain Users, click Remove, click Yes, and then click OK.
PashaModCommented:
Closed, 250 points refunded.
PashaMod
Community Support Moderator

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.