locked
Remote Access to Security Event Log RRS feed

  • Question

  • I'm trying to look at the security event log of a remote XP PC from my Vista PC using Computer Management but I keep getting an access denied message. I'm running the Computer Management MMC as admin and I'm logged onto the Vista PC with an account that is in the domain admin group. I can see all the other event logs, I can start and stop services, I can disable local accounts, I can do almost anything the remote XP PC except look at the security log! Why?
    Hibs Ya Bass!
    Tuesday, November 30, 2010 4:10 AM

All replies

  • Hi,

    Thanks for posting!

    First try to clear the logs in case they are corrupt. You will be given the option to save the log to a file if it contains important information.

    Add the user or the group to the permissions list for the event log files. To view an event log, the user or group must have Read permission. Check if your default administrator account, in Users, is member of Administrators Builtin group. Also check your Domain and DC security policies.

    The event log files are located in the following folder:
    %systemroot%\system32\config

    Regards,


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Friday, December 3, 2010 7:29 AM
    Moderator
  • Hi,

    Thanks for posting!

    First try to clear the logs in case they are corrupt. You will be given the option to save the log to a file if it contains important information.

    Add the user or the group to the permissions list for the event log files. To view an event log, the user or group must have Read permission. Check if your default administrator account, in Users, is member of Administrators Builtin group. Also check your Domain and DC security policies.

    The event log files are located in the following folder:
    %systemroot%\system32\config

    Regards,


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Cleared logs, no corruption. Still can't access the logs. To clarify - from my Vista PC i can view security logs on all other remote Vista PCs. On XP I can view security logs on all remote XP PCs. It's when I attempt to view security logs from a Vista PC to a remote XP PC that access is denied.

    Hibs Ya Bass!
    Wednesday, December 8, 2010 4:33 AM