User Access to Event Logs

Posted on 2006-03-21
Medium Priority
Last Modified: 2010-04-18
Is there a way to give a user access to the event logs within giving Administrator rights?
Question by:PeterErhard
  • 3
LVL 23

Expert Comment

ID: 16252654
Yes, it can be done...just did that recently...

see the KB article here:  http://support.microsoft.com/kb/323076


Author Comment

ID: 16252700
Am I missing something, that doesn't seem to be user specific?
LVL 23

Accepted Solution

TheCleaner earned 2000 total points
ID: 16252777
You have to know how to setup the SDDL string for using that particular user's SID...see here:


In the end, I couldn't figure it out well enough, it was a pain in the butt, so I actually used a MS support incident and had their guys write the SDDL string for me.
LVL 23

Expert Comment

ID: 16252792
BTW, what kind of rights do you need to change...I thought the default was that interactive users (logged on users) had read access to the logs?

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question