User Access to Event Logs

Is there a way to give a user access to the event logs within giving Administrator rights?
PeterErhardAsked:
Who is Participating?
 
TheCleanerCommented:
You have to know how to setup the SDDL string for using that particular user's SID...see here:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthz/security/security_descriptor_string_format.asp


In the end, I couldn't figure it out well enough, it was a pain in the butt, so I actually used a MS support incident and had their guys write the SDDL string for me.
0
 
TheCleanerCommented:
Yes, it can be done...just did that recently...

see the KB article here:  http://support.microsoft.com/kb/323076

0
 
PeterErhardAuthor Commented:
Am I missing something, that doesn't seem to be user specific?
0
 
TheCleanerCommented:
BTW, what kind of rights do you need to change...I thought the default was that interactive users (logged on users) had read access to the logs?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.