Event Viewer Access Denied

I logged in to Windows 7 Pro as local administrator.  I mapped shared drive on AD (Windows 2003).  From my computer, I tried to connect to AD to see Event Viewer but got an error "Access Denied".  I have another application server (Windows 2003).  I have no problem to connect to this application server to see Event Viewer from my Windows 7.  What is different and how can I connect to AD to check Event Viewer from Windows 7.  AD and Application Servers are in the same domain and I know Domain Admin password.

I already tried KB946390 and KB892192, but it did not solve my issue.  Thank you very much in advance.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You are logging in with the local administrator account.  When you try to authenticate, the remote server will attempt to log you on as the local administrator account on it's machine (in the case of a domain controller, the domain "Administrator" account).  If the passwords are not the same as what you logged in with, it will fail.

To get around this, utilize the Run As command to run programs (like event viewer) with domain credentials, thus allowing you to authenticate properly.
Try right clicking and selecting Run As administrator and enter in your admin credentials for the server.

Local Admin  of a the system wont have access to the server's event logs
kg6lfzAuthor Commented:
Thank you very much for your suggestions.  I started Event Viewer with "Run as administrator"  But I was not sure how to give domain admin credential.  I tried "Connect as another user" and used Domain Administrator and password.  Then I got "Connecting as another user is only supported when connecting to a computer running Windows Vista or later." message.

Thank you.
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Are you able to login to the other machine and gain access to it directly?  If so, when you run as another user, type in your username (domain\first.last) and your network password.

If that still doesn't work, try this (a few more steps):

-Start > Run > MMC
-File > Save > Save to your desktop as "admin.msc"
-Close MMC window.
-Shift + right click on the admin.msc item on your desktop, select run as another user.
-Type in the credentials of the user account (your user account is fine if you have permissions to the remote server)
-Inside MMC, click file > add snap-in.
-Select Computer Management and hit Add.
-Click Remote Computer and type in the computer name.
-Click OK
-Expand computer management
-Expand System Tools
-Expand Event Viewer
-Display the log you want.

Long winded, but give it a try.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kg6lfzAuthor Commented:
Piattnd -

Yes.  I can login to the AD and have access no problem.  But when I tired to connect as another user, the error message appears.  I'm not sure because my server is Windows 2003?  

Your MMC steps worked. I could connect to AD and see Event Viewer.  But whenever I want to check Event Viewer, do I have to go thru these above steps?  Is there any way to have a short cut for the above steps?  Thank you for your time and comments.
Not so sure as google out but yes hope it helps you ...

Try out this..

" dd read permission to Local Service on winreg key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ SecurePipeServers\winreg "

Over view this link to know what can be the status for a reason that why it didnt turned up..


Hey Kg,

Once you've created the "admin.msc" file, you don't have to do that any more.  If you want to have the admin.msc file already have event viewer open for the remote server, you can go through the add snap-in steps, then save the file before you close it.  You will want to always do the "run as another user" step though, but the MMC console will automatically attempt to connect to the resources you have saved within the console when you load it up.

Hope that helps!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.