Solved

Event Viewer - Requirements

Posted on 2013-01-24
7
769 Views
Last Modified: 2013-02-01
Hi,

Could someone tell me, what permissions are required to get the event viewer service running under local service account on windows 7?

I understand that local service will require some permissions to parts of the system drive, i.e. %systemroot%\system32\winevt does anyone know what they are specifically?

Perhaps access to the service itself, so full control on Windows event viewer service?

What about registry access? what does local service need for it to work?

Is there any resource i can find on this? or anyone who might know please? thank you kindly.
0
Comment
Question by:the_redburn_dog
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 70

Expert Comment

by:Merete
ID: 38817516
Are you having problems with event viewer/not accessible?
Is this a limited version of windows 7 or something else?

This guide will explain what is going on and why if you are getting an error and then will list steps explaining how to fix the error.
 I have removed the xp procedurals.
To fix this problem by manually editing the registry windows 7
 follow these steps:
1 - Click Start
2 - Click Search Bar
3 - Type Regedit
4 - Hit Enter
5 - Navigate to Key (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog)
6 - Double Click ObjectName
7 - Type NT AUTHORITY\LocalService
8 - Close the registry
9 - Reboot your PC

 Upon reboot the service should startup automatically and you should just be able to open your event logs now with no problems. If you still get the error you will want to try to start the service again manually. To start the event log service manually follow these steps:

1 - Click Start
2 - Click Search Bar
3 - Type Service.msc
4 - Hit Enter
5 - Click Windows Event Log Service
6 - Click Start
You should see a window that opens and starts the service.
source with xp procedurals included
0
 

Author Comment

by:the_redburn_dog
ID: 38817771
Hi, i will try this out now.

Yes i'm having problems with event viewer, the error itself comes up as

"Windows could not start the Windows Event Log service on Local Computer.

Error 0x8007000e: Not enough storage is available to complete this operation."

I have of course googled but haven't had much luck.

I am using Windows 7 Professional SP 1 64bit. It has 90gig spare on the C: and 8 gig of ram so i don't think the error message means anything other than access rights..
0
 

Author Comment

by:the_redburn_dog
ID: 38817801
Hi Thank you again for helping, this unfortunately has not worked.

I gave the regkey full access to Local Service. Still same error. Is there anywhere which needs folder permissions perhaps? or any other suggestions? Do let me know, thank you.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 70

Expert Comment

by:Merete
ID: 38817873
Have you cleaned out the TEMP files?
Try running a disc cleanup simple enough to do and let it show you how big your temp folders has become, windows thumbnails view stuff like
Out of memory errors can start with a full TEMP folder plus other things, defrag the drive.
These are the changes  ACLS
Access Control Lists
http://msdn.microsoft.com/en-us/library/aa374872%28v=vs.85%29.aspx
Windows 7 Access Denied: Permission & Ownership
http://www.addictivetips.com/windows-tips/windows-7-access-denied-permission-ownership/
The best place to inquire about these things is MSDN
http://msdn.microsoft.com/en-us/library/ms123401.aspx
LocalService Account (Windows)
http://msdn.microsoft.com/en-us/library/windows/desktop/ms684188(v=vs.85).aspx

Configure Windows Service Accounts and Permissions
http://msdn.microsoft.com/en-au/library/ms143504.aspx#Serv_SID
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 38819464
0
 

Accepted Solution

by:
the_redburn_dog earned 0 total points
ID: 38825733
I have fixed the issue.

The issue seemed to be a corrupt GP Object.

The solution in this case, I copied the original GPO in order to make to amendments, (my thoughts were that should i make changes and wanted to revert, it would be easier to just keep the original for comparision or in case i make too many changes and forget where i was etc). So i copied the original, and started removing all the GP permission restrictions that were in place on services. I then applied the new GPO which solved the issue. In order to specfically determine the offending service, i then went through systematically re-adding all the services and their orginal permissions into my copied GPO. The curious thing was that once i completed re-adding all the permissions... the event service was still working.

I have looked around and it seems like the only logical explanation was the original GPO was corrupted somehow. I am going to post another question in regard to this but at least now i have the event service working as normal.

Thank you so much for your help.
0
 

Author Closing Comment

by:the_redburn_dog
ID: 38843121
Corrupted GPO was my issue which i apprently solved on my own
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Suggested Courses

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question