Access denied while reading Security log

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I'm trying to access the security log on a remote computer. I have to code it in C++. My code works for the application log, but not for security log. I know there are already several posts to this problem but i can find the clue.

The remote user is member of the administrators group and additionally has the "Manage audit and Security Log" user right. It seems that the right is not given. The security log entry only lists: "SeChangeNotifyPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege"

How do i enable this privilege in ConnectServer or CoSetProxyBlanket?

What is the C++ COM/WMI equivalent to WinMgmts:{impersonationLevel=impersonate,authenticationLevel=PktPrivacy,(security)}?

Note, that i can't use a local process token, i have to logon using a different user name on the remote system.

Thanks

  Achim
.



Relevant Pages

  • Re: Tracking unauthorized access to my computer
    ... Remote Desktop. ... The user name, logon type, and time can give you an idea who is ... Also look at your own logon events for your user account ... I would also increase the size of the security log to like ...
    (microsoft.public.security)
  • Re: Event Log Access
    ... Boy is that bizarre in that you can access the security log but not the ... permissions to them and that administrators/system have full control and the ... >I'm a member of administrators, power users, remote desktop users, and ... >> application log but it would be unusual for you to be a member of the ...
    (microsoft.public.windows.server.security)
  • Event viewer: Security Log - IP tracking
    ... security log to indicate the IP of computers denied access, ... Machine name is useless when the login attempts are remote. ...
    (microsoft.public.security)
  • WMI connectserver using explicit username / password
    ... As far as I understand things, when I do this on a remote computer, I ... need to supply an explicit username and password as ConnectServer ... Another topic of note was that in the security log, ...
    (microsoft.public.scripting.vbscript)