Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Event Viewer - Requirements

Posted on 2013-01-24
7
Medium Priority
?
786 Views
Last Modified: 2013-02-01
Hi,

Could someone tell me, what permissions are required to get the event viewer service running under local service account on windows 7?

I understand that local service will require some permissions to parts of the system drive, i.e. %systemroot%\system32\winevt does anyone know what they are specifically?

Perhaps access to the service itself, so full control on Windows event viewer service?

What about registry access? what does local service need for it to work?

Is there any resource i can find on this? or anyone who might know please? thank you kindly.
0
Comment
Question by:David Harding
  • 4
  • 2
7 Comments
 
LVL 70

Expert Comment

by:Merete
ID: 38817516
Are you having problems with event viewer/not accessible?
Is this a limited version of windows 7 or something else?

This guide will explain what is going on and why if you are getting an error and then will list steps explaining how to fix the error.
 I have removed the xp procedurals.
To fix this problem by manually editing the registry windows 7
 follow these steps:
1 - Click Start
2 - Click Search Bar
3 - Type Regedit
4 - Hit Enter
5 - Navigate to Key (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog)
6 - Double Click ObjectName
7 - Type NT AUTHORITY\LocalService
8 - Close the registry
9 - Reboot your PC

 Upon reboot the service should startup automatically and you should just be able to open your event logs now with no problems. If you still get the error you will want to try to start the service again manually. To start the event log service manually follow these steps:

1 - Click Start
2 - Click Search Bar
3 - Type Service.msc
4 - Hit Enter
5 - Click Windows Event Log Service
6 - Click Start
You should see a window that opens and starts the service.
source with xp procedurals included
0
 

Author Comment

by:David Harding
ID: 38817771
Hi, i will try this out now.

Yes i'm having problems with event viewer, the error itself comes up as

"Windows could not start the Windows Event Log service on Local Computer.

Error 0x8007000e: Not enough storage is available to complete this operation."

I have of course googled but haven't had much luck.

I am using Windows 7 Professional SP 1 64bit. It has 90gig spare on the C: and 8 gig of ram so i don't think the error message means anything other than access rights..
0
 

Author Comment

by:David Harding
ID: 38817801
Hi Thank you again for helping, this unfortunately has not worked.

I gave the regkey full access to Local Service. Still same error. Is there anywhere which needs folder permissions perhaps? or any other suggestions? Do let me know, thank you.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 70

Expert Comment

by:Merete
ID: 38817873
Have you cleaned out the TEMP files?
Try running a disc cleanup simple enough to do and let it show you how big your temp folders has become, windows thumbnails view stuff like
Out of memory errors can start with a full TEMP folder plus other things, defrag the drive.
These are the changes  ACLS
Access Control Lists
http://msdn.microsoft.com/en-us/library/aa374872%28v=vs.85%29.aspx
Windows 7 Access Denied: Permission & Ownership
http://www.addictivetips.com/windows-tips/windows-7-access-denied-permission-ownership/
The best place to inquire about these things is MSDN
http://msdn.microsoft.com/en-us/library/ms123401.aspx
LocalService Account (Windows)
http://msdn.microsoft.com/en-us/library/windows/desktop/ms684188(v=vs.85).aspx

Configure Windows Service Accounts and Permissions
http://msdn.microsoft.com/en-au/library/ms143504.aspx#Serv_SID
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 38819464
0
 

Accepted Solution

by:
David Harding earned 0 total points
ID: 38825733
I have fixed the issue.

The issue seemed to be a corrupt GP Object.

The solution in this case, I copied the original GPO in order to make to amendments, (my thoughts were that should i make changes and wanted to revert, it would be easier to just keep the original for comparision or in case i make too many changes and forget where i was etc). So i copied the original, and started removing all the GP permission restrictions that were in place on services. I then applied the new GPO which solved the issue. In order to specfically determine the offending service, i then went through systematically re-adding all the services and their orginal permissions into my copied GPO. The curious thing was that once i completed re-adding all the permissions... the event service was still working.

I have looked around and it seems like the only logical explanation was the original GPO was corrupted somehow. I am going to post another question in regard to this but at least now i have the event service working as normal.

Thank you so much for your help.
0
 

Author Closing Comment

by:David Harding
ID: 38843121
Corrupted GPO was my issue which i apprently solved on my own
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: Lee
Windows 7 Ultimate and Enterprise (and 2008 R2) introduced a new feature you may not be aware of - Boot from VHD.   Boot from VHD (or what Microsoft refers to asNative Boot allows you to install Windows to a VHD (Virtual Hard Disk) file that is t…
First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question