Re: Vista Remote Event Log viewer

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Dear Marshall,

Thank you for posting here.

From your problem description, my understanding is: When you attempt to
check the Event Log on the remote Windows Vista machine, the error message
saying "RPC is unavailable" appears. As I understand, the connection can be
established successfully from your DC. If I have misunderstood about your
concern, feel free to let me know.

Generally, this issue may occur:

a. The remote computer is un-available on the network.
b. The Remote Event Log Management firewall exception has been NOT set on
the remote computer.
c. Your user account has permission to access the remote computer.

Considering the current situation, please try to ensure the "Remote Event
Log Management firewall" exception is enabled on the remote Vista machine
by the steps below:

NOTE: You can check these settings via Remote Desktop session.

1. On the remote Windows Vista machine, click Start, type: firewall in the
Start Search bar.
2. Click Windows Firewall in the list.
3. Click Change settings.
4. In the ""Windows Firewall Settings" panel, please click "Exceptions" tab
and then ensure that "Remote Event Log Management firewall" is enabled in
the list.
5. Click OK to apply this setting.
6. After that, please go to the "Services.msc" and then restart the "Remote
Registry service".
7. On the local Vista machine, let's first use the following wevtutil
utility command-line to check if we are able to manage event logs on a
remote computer

wevtutil el /r:<remote_computer_name> /u:<user_name> /p:<password>

8. If it is successful, please try to test the issue again in the Event
View console.

Additional Reference
--------------------------------
Troubleshooting Event Viewer in Vista
http://technet2.microsoft.com/WindowsVista/en/library/2564192f-b638-47c8-ad3
1-9dbdf6f198f91033.mspx

Work with Event Logs on a Remote Computer
http://www.microsoft.com/technet/WindowsVista/library/ops/cfad9c47-96cc-46d8
-b432-2baf661a72bb.mspx

Have a nice day!

Best regards,

Adams Qu
MCSE, MCDBA, MCTS
Microsoft Online Support

Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "mlai" <mlai@xxxxxxxxxxxxxxxx>
| References: <796FBBA1-C9E7-48E4-9B75-F8C661593AD7@xxxxxxxxxxxxx>
<DDA47E46-E3B3-4FBC-9A4E-C56B5EEABC17@xxxxxxxxxxxxx>
| Subject: Re: Vista Remote Event Log viewer
| Date: Mon, 5 Nov 2007 16:39:49 +0800
| Lines: 1
| Message-ID: <D28BED3C-8B46-4A55-98DF-E0F486006B97@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=response
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| Importance: Normal
| X-Newsreader: Microsoft Windows Live Mail 12.0.1365
| X-MimeOLE: Produced By Microsoft MimeOLE V12.0.1365
| X-MS-CommunityGroup-PostID: {D28BED3C-8B46-4A55-98DF-E0F486006B97}
| X-MS-CommunityGroup-ThreadID: 796FBBA1-C9E7-48E4-9B75-F8C661593AD7
| X-MS-CommunityGroup-ParentID: DDA47E46-E3B3-4FBC-9A4E-C56B5EEABC17
| Newsgroups:
microsoft.public.windows.server.general,microsoft.public.windows.vista.netwo
rking_sharing,microsoft.public.windows.vista.performance_maintenance
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.networking_sharing:16788
microsoft.public.windows.vista.performance_maintenance:14794
microsoft.public.windows.server.general:26015
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Thanks for the link. Followed the link, added the DWORD to the registry
and
| rebooted. Fired up Event view and tried to connect to a remote machine.
| Same error of RPC Server unavailable.....
|
|
|
| "Kerry Brown" <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote in message
| news:DDA47E46-E3B3-4FBC-9A4E-C56B5EEABC17@xxxxxxxxxxxxxxxx
| > You need to make a registry change.
| >
| > http://www.jimmah.com/vista/Administration/filtertoken.aspx
| >
| >
| >
| > --
| > Kerry Brown
| > Microsoft MVP - Shell/User
| > http://www.vistahelp.ca
| >
| >
| > "mlai" <mlai@xxxxxxxxxxxxxxxx> wrote in message
| > news:796FBBA1-C9E7-48E4-9B75-F8C661593AD7@xxxxxxxxxxxxxxxx
| >> Hi,
| >> How can I view event logs on a remote machine running Vista? I can
| >> view remote events on machines running XP and 2003 but not Vista.....
| >> The Vista machine all have their remote registry service running
already.
| >> But when I connect to a remote machine via event viewer, it always
| >> complain that rpc server is not available......
| >>
| >> Please help.
| >>
| >> Marshall
| >
|

.



Relevant Pages

  • Re: Cant read event logs on Win2003 server
    ... You do not have problems reading the event log, etc, when you log on to ... You have problems when you are on a remote machine and try to "manage" it. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > "Arch Willingham" wrote in message ...
    (microsoft.public.windows.server.security)
  • Re: Event ID: 4000
    ... Based on the text of your event log, it appears that DNS is working fine. ... The problem may happen when your server attempts to connect to the remote ...
    (microsoft.public.exchange2000.protocols)
  • Re: writing to a remote event log.....
    ... and call my advice useless. ... >> Everybody who cross-posts has a reason for doing so. ... >>> But when I moved the COM+ component onto a remote application server I ... >>> Can anyone tell me how to cofig the event log so that the remote COM+ ...
    (microsoft.public.dotnet.framework.component_services)
  • Re: writing to a remote event log.....
    ... and call my advice useless. ... >> Everybody who cross-posts has a reason for doing so. ... >>> But when I moved the COM+ component onto a remote application server I ... >>> Can anyone tell me how to cofig the event log so that the remote COM+ ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Urgent!!! Large amount of DCOM 10020 errors in event log afte
    ... And the the Event log not accessible remotely as due to remote registry ... MCSA Windows 2003 server ... the restore, the DHCP database is corrupted and I had restored the ...
    (microsoft.public.windows.server.general)