Registry HKLM>System not saving permissions changes!
Major problem right now; I'm getting "Access is Denied" "Error 5" messages constantly in the event viewer saying that DHCP is shutting itself down, the event log can't run itself, and all kinds of things like that. The central issue here seems to be that access is being denied to do things like write changes into event logs, etc.The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-Wired-AutoConfig/Operational. This is an example of one of the errors. I usually get about 25 of these every time I go into eventvwr.msc - the only different is what the string is before the /Operational.Now, I've looked in the registry and and tried to add "Local Service" and "Network Service" into HKLM>System>Services. Either those two accounts only have "read access" or they're not even listed at all. But then when I restart the machine, the changes have been reverted and once again, they're either not at "full control" or they're missing entirely!What can be causing this? I need this ASAP because right now, Windows Server Backup in the snap-in refuses to run itself because, "Access is Denied: Make sure the event log service is running." It is, but just like most of the services, the local/network service accounts do not have full access to it.I'd appreciate any help that someone can give me. :) Thanks!
October 5th, 2008 8:17pm
Try using Registry from Local System Account (LSA) using AT command from CMD.Check the Example below.Please log on using Administrator account and go the command prompt and type this at 16:30 /interactive Regedit.exe16:30 refers to the time http://support.microsoft.com/kb/313565/en-usHope it helps Syed Khairuddin
Free Windows Admin Tool Kit Click here and download it now
October 6th, 2008 12:54pm
Well I was also having same kind of errors after migrating to windows server 2008. Do one thing, assign "LOCAL SERVICE" and "NETWORK SERVICE" groups in security tab of "winevt" folder (C:\windows\systems32) and check that out.It really helped me to resolve many issues of the same kind, but "Windows Server Backup" didnt work in GUI mode, I will strongly suggest you to take system backup by using "wbadmin" in CMD.Its easy and work perfectly. All you need to do isopen CMD and write "wbadmin start systemstatebackup -backuptarget:D:"
July 13th, 2009 9:29am
Dont forget to restart "Event Log" service.
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2009 9:35am


