Re: unaccesible system event log

Sophos EM Library is one part of antivirus solution for distributing
antivirus protection Sophos to workstations. I remember that I had problems
with reading Sophos EM Library logs on old server 2000, too (it is installed
on it).

I have no access to server now, so I can't answer exactly your questions
about security logs (I'll be in office on Monday)

I installed Sophos to server 2003 after adding it to domain as DC

Anyway it sounds reasonable to start again from scratch, but I am afraid
that the error could happen even on fresh new server 2003 aded to old domain
....

Jan

"Al Mulnick" wrote:

What's this? Sophos EM Library

And what do you see in the security logs (is auditing turned up so you get
failure auditing?) when you try to access the security logs?

I'm guessing a local group policy may have been applied that didn't get
overwritten upon dcpromo, but that's really a stretch at this point.

Typically, if I can identify that as a problem I scrap the DC and start
again fresh.

If you're adding antivirus and other security software prior to the
promotion, I suggest you consider a change to your process in favor of just
building it plain vanilla out of the box, promoting it, stabilizing it, and
then adding the other software you need.

Al


"Jan" <Jan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8DAF4794-7836-4106-B724-186D5CC21094@xxxxxxxxxxxxxxxx
Yes, it is the server I added to domain, the first DC is server 2000 and
has
logs ok, I can read them.
There are logs: Application, Directory service, File replication service,
Internet explorer, Security, Sophos EM Library, System, Virtual server.
And from this logs only accesible are: Security and Virtual server.

"Al Mulnick" wrote:

Is it just this machine that you are unable to access the system log? Is
it
the system log only?



"Jan" <Jan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:691FC44A-D2E3-4687-A866-3A38AC848277@xxxxxxxxxxxxxxxx
I am logged as domain administrator, and when try to read system event
log
with application "Event viewer" I get error message

unable to complete the operation on "System". access is denied << .

It is on Windows Server 2003 now configured as second DC. Access
rights
to
files system.evt and so on are all ok. Before adding server to domain
as
DC
all logs were accesible normally. What is wrong?







.

Relevant Pages

  • Re: unaccesible system event log
    ... antivirus protection Sophos to workstations. ... I have no access to server now, so I can't answer exactly your questions ... about security logs ... And what do you see in the security logs (is auditing turned up so you ...
    (microsoft.public.windows.server.active_directory)
  • Re: unaccesible system event log
    ... "Al Mulnick" wrote: ... I have no access to server now, so I can't answer exactly your questions ... about security logs ... And what do you see in the security logs (is auditing turned up so you ...
    (microsoft.public.windows.server.active_directory)
  • RE: Computers losing their connection
    ... I am getting some event errors in the security logs. ... > Have you looked at the logs on the server? ... they have to restart their computer to regain the connection to some ...
    (microsoft.public.windows.server.sbs)
  • Re: Security event log collection
    ... in order to collect security logs. ... Each domain is running the script. ... supposed to call all of the event logs and winzip it up on a server on each ...
    (microsoft.public.windows.server.scripting)
  • RE: isa 2004 & external website access issue
    ... emailed the logs to you as requested. ... each web server has its own public IP ... > headers in ISA Server ... > 'Microsoft Firewall' service. ...
    (microsoft.public.windows.server.sbs)
Quantcast