Permissions to write in Windows Event Viewer
Hi huys;
How can I assign the write permission to a service account in the Application Event Log (The OS in a Windows Server 2003 x64-bits)? The service account is not an Local Admin.
Thanks a lot;
BanierBanier Garca.
November 19th, 2012 5:51pm
Any running application can log anything, only not in the security's tab.
Please see;
http://msdn.microsoft.com/fr-fr/library/windows/desktop/aa363679(v=vs.85).aspx &
http://msdn.microsoft.com/fr-fr/library/windows/desktop/aa363678(v=vs.85).aspx
For any further question, please ask in the dev/api's forum please
For reference;
HANDLE RegisterEventSource(
_In_ LPCTSTR lpUNCServerName,
_In_ LPCTSTR lpSourceName
);
Parameters
lpUNCServerName [in]
The Universal Naming Convention (UNC) name of the remote server on which this operation is to be performed. If this parameter is NULL, the local computer is used.
lpSourceName [in]
The name of the event source whose handle is to be retrieved. The source name must be a subkey of a log under the Eventlog registry key. Note
that the Security log is for system use only.
Note This string must not contain characters prohibited in XML Attributes, with the exception of XML Escape sequences such as < &gl.
Return value
If the function succeeds, the return value is a handle to the event log.
If the function fails, the return value is NULL. To get extended error information, call
GetLastError.
The function returns ERROR_ACCESS_DENIED if lpSourceName specifies the Security event log.
Remarks
If the source name cannot be found, the event logging service uses the
Application log. Although events will be reported , the events will not include descriptions because there are no message and category message files for looking up descriptions related to the event identifiers.
MCP | MCTS 70-236: Exchange Server 2007, Configuring
Want to follow me ? | Blog:
http://www.jabea.net | http://blogs.technet.com/b/wikininjas/
Free Windows Admin Tool Kit Click here and download it now
November 19th, 2012 8:39pm
Any running application can log anything, only not in the security's tab.
Please see;
http://msdn.microsoft.com/fr-fr/library/windows/desktop/aa363679(v=vs.85).aspx &
http://msdn.microsoft.com/fr-fr/library/windows/desktop/aa363678(v=vs.85).aspx
For any further question, please ask in the dev/api's forum please
For reference;
HANDLE RegisterEventSource(
_In_ LPCTSTR lpUNCServerName,
_In_ LPCTSTR lpSourceName
);
Parameters
lpUNCServerName [in]
The Universal Naming Convention (UNC) name of the remote server on which this operation is to be performed. If this parameter is NULL, the local computer is used.
lpSourceName [in]
The name of the event source whose handle is to be retrieved. The source name must be a subkey of a log under the Eventlog registry key. Note
that the Security log is for system use only.
Note This string must not contain characters prohibited in XML Attributes, with the exception of XML Escape sequences such as < &gl.
Return value
If the function succeeds, the return value is a handle to the event log.
If the function fails, the return value is NULL. To get extended error information, call
GetLastError.
The function returns ERROR_ACCESS_DENIED if lpSourceName specifies the Security event log.
Remarks
If the source name cannot be found, the event logging service uses the
Application log. Although events will be reported , the events will not include descriptions because there are no message and category message files for looking up descriptions related to the event identifiers.
MCP | MCTS 70-236: Exchange Server 2007, Configuring
Want to follow me ? | Blog:
http://www.jabea.net | http://blogs.technet.com/b/wikininjas/
November 19th, 2012 8:51pm