Link to home
Start Free TrialLog in
Avatar of omnipower321
omnipower321Flag for United States of America

asked on

Having trouble figuring out how to create SDDL string for security log access on DC

Good morning,

I need to grant read only access to the security logs on our domain controllers to a single domain user.  We have a mix of 2008 and 2003 domain controllers if that matters.  I have been attempting to do it with an SDDL string, but can't for the life of me figure out the syntax.

Thank you for any assistance.
ASKER CERTIFIED SOLUTION
Avatar of Batuhan Cetin
Batuhan Cetin
Flag of Türkiye image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of omnipower321

ASKER

Works great!  Thank you!
Spoke to soon.  Works fine on 2003 DC, but not 2008.  Receiving the following error on 08:

Unable to complete the operation on "Security".  A required privelege is not held by the client.