Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Access to event viewer for non server users

Posted on 2006-11-30
5
Medium Priority
?
3,062 Views
Last Modified: 2012-06-27
I have a windows 2003 domain that has a handful of application servers in it. I am looking to give my admins group the ability to read from the event viewer for troubleshooting remotely. These users cannot have an account on the server and do not have admin level permissions of any kind.

Is there a way to grant them the ability to connect to the event logs on a machines remotely (using event viewer on another server) without making them a local admin account/user permissions? They only need to be able to connect to the log files and read from them. They do not have the need to make any changes.

Thanks

0
Comment
Question by:rbosco020475
  • 3
5 Comments
 
LVL 26

Expert Comment

by:Pber
ID: 18045901
Yes there is.  It isn't the most simplest procedure, but this will do it.  We do this with our Domain Controllers and allow the exchange admins to view logs on the DC's without giving them domain admin access.

http://support.microsoft.com/default.aspx/kb/323076
0
 
LVL 1

Expert Comment

by:jasonskaggs
ID: 18045914
They could use Manage and connect to the remote computer, without admin privledges they will not be able to see the security logs but the other logs should be visible. In order to view security logs they have to have administrator rights on the box.

Right click My computer-->Manage, Right Click Computer Management-->connect to another computer.

0
 
LVL 26

Expert Comment

by:Pber
ID: 18045920
See this as well: http://www.microsoft.com/technet/security/guidance/serversecurity/tcg/tcgch06n.mspx

specifically: Delegating Access to the Event Logs

0
 
LVL 26

Accepted Solution

by:
Pber earned 1000 total points
ID: 18387920
My posts provide exactly what the user requires.  Following the procedures provided the user will be allowed to use a remote event viewer to view events on the target server even if the user is a non admin on that target server.  The user will be able to see system/application and even security logs if that is the access you assigned.  The user can even be granted the rights to clear event logs and still be a non admin on the server.
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Learn about cloud computing and its benefits for small business owners.
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question