Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Access Denied Writing to Eventlog

Posted on 2008-06-20
6
Medium Priority
?
553 Views
Last Modified: 2012-06-27
I am working in C# MOSS application.
On the read/write site where users have to log in, and  when an error occurs, I am able to log the error to a custom eventlog source.

But on the read only site when Anonymous user access the site and an error occurs, the error is not logged to the eventlog source.
Rather, an error occurs (Access denied writing to the Eventlog).

I added autheticated users to the Eventlog source in my Windows 2003 SP2 registry.  But I'm still getting access denied when Anonymous users access the read onyl site and an error occurs.

I also looked into Adjusting "managing auditing and security logs" by adding Anonymous users but still getting same error.

Any help would be greatly appreciated.

Tom
0
Comment
Question by:TomDa
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 16

Expert Comment

by:2PiFL
ID: 21834511
0
 

Author Comment

by:TomDa
ID: 21845186
The article sounds like the right article but when I click on any of the article's links, the cooresponding pages are either in Chinese or the article is broken, very strange.  See for yourself.  Click one of the links and see if you get a weird page with no content.

0
 
LVL 16

Expert Comment

by:2PiFL
ID: 21845211
That is weird.  This article from MS will give you what you need.

http://support.microsoft.com/kb/323076
0
Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

 

Author Comment

by:TomDa
ID: 21845671
I found this article just before you sent it to me.
That said, I backed up my registry and then changed my registy entry to allow Anonymous Access read write and clear privledges by changing the default key
from
O:BAG:SYD:(D;;0xf0007;;;AN)(D;;0xf0007;;;BG)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x1;;;AU)
to this...
O:BAG:SYD:(A;;0xf0007;;;AN)(D;;0xf0007;;;BG)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x1;;;AU)

I then did an iisreset
And I still have the same problem.

Any other suggesstions.

Also fo note, when I break into the code the value of user is null but the error says that my app pool user does not have access.  yet he is a member of the local Administrator group.

Any other ideas would be appreciated?

Tom

0
 
LVL 16

Accepted Solution

by:
2PiFL earned 1500 total points
ID: 21847350
Just as a test, change (A;;0x1;;;AU) to (A;;0x7;;;AU)
0
 

Author Comment

by:TomDa
ID: 21857525
Still not luck.
Any other ideas?

Tom
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you're a modern-day technology professional, you may be wondering if certifications are really necessary. They are. Here's why.
A new hacking trick has emerged leveraging your own helpdesk or support ticketing tools as an easy way to distribute malware.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

661 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question