How Can I Grant a Domain User permission to WRITE to the event logs

How do I allow a regular Domain account to write to the event logs on a Windows 2003 server.
We do not have the option to ADD the account to the Local Administrators group.
I understand that there are some registry changes that need to be implemented, but I would appreciate detailed instructions to accomplish this task.

Thanks

JEEGO
LVL 1
JEEGOAsked:
Who is Participating?
 
mass2612Connect With a Mentor Commented:
Hi,

You can't really manage to use a domain account specifically as far as I know. You need to refer to the built in SID strings.

Here is a list of the SID strings: -
http://msdn2.microsoft.com/en-us/library/aa379602.aspx

For example to provide read access to the Application log for all Authenticated users you would use the ACE: -
(A;;0x1;;;AU)

When A = Application, 0x1 = Read and AU=Authenticated Users

The blog tries to explain this further and does a pretty good job of it - http://flimflan.com/blog/PermissionsOnTheWindows2003ServerEventLog.aspx
0
 
mass2612Commented:
Hi,

Read, write access to the event logs can be controlled via the group policies, try this: -

How to set event log security locally or by using Group Policy in Windows Server 2003
http://support.microsoft.com/kb/323076
0
 
JEEGOAuthor Commented:
Thanks for the link.  I have perused the content therein, but still have additional question(s)
How do I refer to the domain user account when editing the SDDL string?
0
 
JEEGOAuthor Commented:
For this particular problem, I needed to assign the permissions to a particular user.
The direction provided by mass2612 helped resolve the issue, thus I will assign the points
I found a script on a site that was able to provide me with the SID assoc. with a particular domain user.
0
 
mass2612Commented:
Thanks for the points can you please drop a link in here to where you found the script?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.