Re: Event viewer security issue

From: Dave Patrick (mail_at_NoSpam.DSPatrick.com)
Date: 08/12/04


Date: Wed, 11 Aug 2004 20:40:23 -0600

This article may help.

How to Restore the Default NTFS Permissions for Windows 2000
http://support.microsoft.com/?id=266118

-- 
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
"John" wrote in:
| On Fri, 06 Aug 2004 10:33:57 GMT, Feng Mao wrote:
|
| > Hi John,
| >
| > Thank you for posting!
| >
| > I have some additional information, if the Windows Server 2003 is not a
| > Domian Controller, registry modifcations can be made to resolve this:
| >
| > By reseting the restrictguestaccess registry value to 0 for the
| > application, system and dns logs under the following registry key.
| >
| > HKLM\System\CurrentControlSet\Services\EventLog
| >
| > After that, reboot the server.
| >
| > Have a good day!
| >
| > Thanks & Regards,
| >
| > Feng Mao [MSFT], MCSE
| > Microsoft Online Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no 
rights.
| >
| >
| >
| > --------------------
| >| From: John <jschaaf@wyseadv.com>
| >| Subject: Event viewer security issue
| >| User-Agent: 40tude_Dialog/2.0.12.1
| >| MIME-Version: 1.0
| >| Content-Type: text/plain; charset="us-ascii"
| >| Content-Transfer-Encoding: 7bit
| >| Sender: jschaaf@wyseadv.com
| >| Reply-To: jschaaf@wyseadv.com
| >| Organization: Wyse Advertising, Inc.
| >| Date: Thu, 5 Aug 2004 14:25:51 -0400
| >| Message-ID: <19109zie7ptn8.1jwfsc725vfvz$.dlg@40tude.net>
| >| Newsgroups: microsoft.public.windows.server.general
| >| NNTP-Posting-Host: email-server.wyseadv.com 207.54.171.78
| >| Lines: 1
| >| Path:
| > 
cpmsftngxa06.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13
| > .phx.gbl
| >| Xref: cpmsftngxa06.phx.gbl 
microsoft.public.windows.server.general:41612
| >| X-Tomcat-NG: microsoft.public.windows.server.general
| >|
| >| On our Win2003 server, we are unable to view any of the files in Event
| >| viewer other than Security.  When we click on any of them, I.E.
| >| Applications, we get the following error: Unable to complete the 
operation
| >| on "Applications".  Access is denied.  This sounds like a security 
issue,
| >| but we are logged in as Administrator, and we have checked the security 
on
| >| the associated Event Viewer files and we have full rights to the files.
| >| The files are in c:\windows\system32\config.
| >|
| >| Thansk for the help.
| >|
| >| John.
| >|
|
| Thanks for your replies Dave Patrick and Feng Mao.
|
| Feng, our server is a Domain controller so we will not try your solution.
|
| Dave, we did try what you suggested.  The server recreated the files and 
we
| still get the same error message.
|
| Any more suggestions?
|
| Thanks.
| John. 


Relevant Pages

  • SecurityFocus Microsoft Newsletter #49
    ... Subject: SecurityFocus Microsoft Newsletter #49 ... Microsoft Windows NNTP Denial of Service Vulnerability ... Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability ... Microsoft ISA Server H.323 Memory Leak Denial of Service... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #154
    ... MICROSOFT VULNERABILITY SUMMARY ... ISS RealSecure Server Sensor SSL Denial Of Service Vulnerabi... ... Roger Wilco Remote Server Side Buffer Overrun Vulnerability ... available for Microsoft Windows operating systems. ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #77
    ... MICROSOFT VULNERABILITY SUMMARY ... Novell GroupWise Web Root Disclosure Vulnerability ... Microsoft Windows NT Security Policy Bypass Vulnerability ... CVS Server Global Variable Denial Of Service Vulnerability ...
    (Focus-Microsoft)
  • Re: after installing KB011829 OWA is not working anymore
    ... Windows Vista or IE 7.0 no longer includes support for the ActiveX control ... The resolution for this issue is to install hotfix KB 911829. ... and to the back-end server. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.exchange.connectivity)
  • SecurityFocus Microsoft Newsletter #153
    ... MICROSOFT VULNERABILITY SUMMARY ... ZoneAlarm Random UDP Flood Denial Of Service Vulnerability ... FloosieTek FTGatePro Mail Server Path Disclosure Vulnerabili... ... Microsoft Windows NetBIOS Name Service Reply Information Lea... ...
    (Focus-Microsoft)