access denied when trying to connect to event viewer Remotely
Hi
I have a SCCM 2007 on Windows 2008 R2.
Win XPsp3 Clients.
whenever i try to access the event viewer remotely, I get an "Access is denied(5)" error (right
click on station>start>windows event viewer)
resource explorer works fine as well as remote tools.
port 135 is open.
same error when I use eventvwr and > connect to another computer
Im connecting as domain admin.
thanks
TH
January 15th, 2012 3:40am
Hi.
You say that 135 is open, if we look at
Service overview and network port requirements for the Windows Server system KB832017. We see that it uses:
<<>>
RPC/named pipes (NP)
TCP
139
RPC/NP
TCP
445
RPC/NP
UDP
137
RPC/NP
UDP
138
Note The Event Log service uses RPC over named pipes. This service has the same firewall requirements as those of the "File and Printer Sharing" feature.
<</>>
Is "File and printing sharing enabled" in the firewall?Oscar Virot
Free Windows Admin Tool Kit Click here and download it now
January 15th, 2012 9:23am
yes
TCP139 is open.
January 15th, 2012 9:54am
Hi,
Oh, it's abnormal and maybe something corrupt.
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.Rick Tan
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
January 17th, 2012 2:02am
Hi,
This issue could be caused by that GPO policy is pushing down permissions from the System32 folder that is too restrictive for the 2008R2 permissions that are needed. Based on current sitaution, please Added permissions to the GPO for the \windows\system32\winevt\logs
folder and check the result. Thanks.
Kevin NiPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 17th, 2012 9:46pm
was this on the local machine or the remote server?
Free Windows Admin Tool Kit Click here and download it now
April 3rd, 2012 6:41pm
on the remote machine.
April 9th, 2012 6:11pm
I have tried this on multiple machines over the years, and it doesn't work (winreg already has read access set for the 'Local Service' account), additionally none of these machines are upgrades from Win 2k. The only thing that does work is to grant read
permissions to the SecurePipeServers key for Local Service.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2012 10:04am