Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 745
  • Last Modified:

Need to give access to users without admin rights to event viewer

Ideally I need to have the user get in for example Right click My computer-->Manage, Right Click Computer Management-->connect to another computer and open event view. They cannot have admin access and I need them just to be able to view Applications and System logs. not worrid about security.

I've looked at http://support.microsoft.com/default.aspx/kb/323076, but I'm hoping there is a simpler way.
0
garent75
Asked:
garent75
  • 2
1 Solution
 
SysExpertCommented:
See if you can change the permissions on the logs.

I thought that they were read only in any case for most users.


I hope this helps !
0
 
garent75Author Commented:
Tried changing permissions from the Registry and from Amdin tools with no luck. Also tried creating new GPO and assigned user group to the new msc but that didn't work either.
0
 
Henrik JohanssonSystems engineerCommented:
You nead to configure this through SDDL as described in the KB
When trying to do the change, how was the SDDL string formated?
0
 
garent75Author Commented:
That's wheer the issue was. DSSl string was incorrect. This string worked for me.
O:BAG:SYD:(D;;0xf0007;;;AN)(D;;0xf0007;;;BG)(A;;0xf0007;;;AU)(A;;0xf0007;;;SY)(A;;0x5;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x2;;;BA)(A;;0x2;;;LS)(A;;0x2;;;NS)
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now