Re: View an security log on an Windows XP Pro client

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Paul,

I got it to work thanks for all your information that you gave to me.

It was enabled within GPO link and no groups were in the policy. I just added the local admin group for now until we decide who gets this right.

Thanks again!

"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message news:%23tTNmgFVIHA.1188@xxxxxxxxxxxxxxxxxxxxxxx
Yeah that is the setting, Non-admins need to be included in this group. I thought you could deny access as well but after looking through it I was mistaken.

Have you tried the admin account or a different user account in the local admins group? Have you verified the machine is able to talk to the domain?

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Sabo, Eric" <sabo_e@xxxxxxx> wrote in message news:OL%23h8h7UIHA.2000@xxxxxxxxxxxxxxxxxxxxxxx
Are you talking about "manage auditing and security logs" this is under user right assignment.

No groups are in there so it isn't define.


"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message news:e98gvI5UIHA.1208@xxxxxxxxxxxxxxxxxxxxxxx
There is a group policy setting that controls who can and can't access the security log, I don't recall the setting name though and my link to the location of all the settings has gone 404.

I would make sure that this machine is actually in the domain. It sounds like there could be an issue with domain connectivity, since it sounds like you are attempting to access the logs as a local administrator. You could also try other accounts that are local admins on the box to see if there is some specific issue with the group membership.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Sabo, Eric" <sabo_e@xxxxxxx> wrote in message news:%233j9ONzUIHA.4696@xxxxxxxxxxxxxxxxxxxxxxx
We are getting "access denied" when trying to view an security log remotely on a Windows XP Pro Service Pack 2. Our domain contains all Windows 2003 domain controllers. We have a global security group that is in the local administrator group on the Windows XP Pro Service Pack 2 client.

Is there any tool that we could use to find out why we are getting access denied when trying to view the security log of the remote client.

If this post shouldn't go in this group, please direct on where to post this.

Thanks in Advance,
Eric Sabo







.

Relevant Pages

  • Re: users and local Admins
    ... Windows 2000 to Windows 2003. ... Each user account in the domain is member of the Local Administrators ... accounts from Local Admins in desktops and laptops. ... If you want official advice from Microsoft, ...
    (microsoft.public.security)
  • RE: New IE flaw and exploit sites/migration to non-MS browser
    ... Windows 2000/XP/2003 should never have been released while ... effectively requiring users to be local admins on the box (and despite ... that these platforms have NOT been designed with LUA in mind). ...
    (Focus-Microsoft)
  • Re: Auto-logon: securing the registry
    ... How to Enable Automatic Logon in Windows NT ... How to Enable Automatic Logon in Windows Server 2003 ... If we were to restrict the Winlogon key in the registry to the local admins ...
    (microsoft.public.windows.server.general)
  • Re: Repost - Unable to remotely manage event log on WinXP Pro upgraded from Win2K
    ... What happens if you give an individual domain account into the Local Admins ... What OS are you connecting to the Windows XP system with? ... Since this was an upgrade, it is possible that your permissions have been ... the winreg key and added the AllowedPaths key entry - ...
    (microsoft.public.windowsxp.security_admin)