SBS 2008 - looking at a workstation's event viewer logs

Running an SBS 2008 server and I have a Windows 7 Professional workstation.  From the server I want to be able to view the workstation's event viewer logs.  I know in SBS 2003 and XP workstations I was able to do this.  I could just right clickk on the computer name and choose view event logs.  Any ideas?  
tparrettAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Amitabh SinghAWS Certified Solution Architect | L3 IT Specialist for CloudCommented:
just add your account to be member of "Event Log Readers" group on remote system and then you able to read Event Logs .
0
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Create and link a GPO to the Computers OU and call it Windows Computers Policy (or the like).

In that GPO disable the Users settings by right clicking and selecting properties on the GPO itself in GPMC.

Once disabled you will find Windows Advanced Firewall under Computers\Windows Security (iirc).

Set the following Inbound rules:

Remote Event Log
Remote Desktop
Remote Volume Management

GPUpdate /Force on the server.

GPUpdate /Force on each workstation then reboot. Some Machine based settings can only be applied at reboot.

We do this for all of our SBS setups and Win2K8 RTM/R2 AD GPO structures.

Philip
0
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Create and link a GPO to the Computers OU and call it Windows Computers Policy (or the like).

In that GPO disable the Users settings by right clicking and selecting properties on the GPO itself in GPMC.

Once disabled you will find Windows Advanced Firewall under Computers\Windows Security (iirc).

Set the following Inbound rules:

Remote Event Log
Remote Desktop
Remote Volume Management

GPUpdate /Force on the server.

GPUpdate /Force on each workstation then reboot. Some Machine based settings can only be applied at reboot.

We do this for all of our SBS setups and Win2K8 RTM/R2 AD GPO structures.

Philip
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tparrettAuthor Commented:
MPECSInc:  After going through these steps how will I view the workstations event logs?  I appreciate your help with this and please excuse my "newbie" questions

Thanks.
0
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Once the GPO settings have taken one can right click in a computer in Active Directory Users and Computers and "Manage" it. This will bring up the same MMC as we get when we right click on Computer and "Manage" while at the desktop.

Philip
0
tparrettAuthor Commented:
Great - - This seems to be working.  Again thanks for all the help.

0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.