Vista Remote Event Log viewer

M

mlai

Hi,
How can I view event logs on a remote machine running Vista? I can view
remote events on machines running XP and 2003 but not Vista..... The Vista
machine all have their remote registry service running already. But when I
connect to a remote machine via event viewer, it always complain that rpc
server is not available......

Please help.

Marshall
 
J

Jabez Gan [MVP]

Try disabling the Firewall on Vista and see if this works. If it works ,
re-enable the firewall and work from there.

Alternatively, you can setup Event Forwarding on Vista.
 
M

mlai

Something strange is going on. On my domain server (Server 2003), I can
access the event logs on Vista PCs. But when I am at my station running
Vista, I cannot access the logs on other Vista PCs.... Doesn't sound quite
like a firewall issue as it should have blocked the 2003 server as well....
 
H

Helen Li [MSFT]

Dear Marshall,

This issue can be reproduced on my side and when connecting to a Windows
Vista computer from another Windows Vista system, the following error
appears:
Event Viewer cannot connect to computer computer_name and the reported
error: "The RPC server is unavailable".

It is related to the default settings on the Windows Firewall and we can
take the following steps to eliminate this error:

1. Click Start and enter firewall.cpl in the Start Search. Press Enter.
2. In the left tasks pane, click Allow a program through Windows Firewall.
3. Under the Exceptions tab, ensure "Remote Administration" and "Remote
Event Log Management" are checked.
4. Click Apply and OK.

If you have any concerns on the above, please feel free to post back and I
am happy to answer any of your questions.

Regards,

Helen Li, MCSE 2003

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "mlai" <[email protected]>
| Subject: Vista Remote Event Log viewer
| Date: Mon, 5 Nov 2007 09:11:47 +0800
| Lines: 1
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| Importance: Normal
| X-Newsreader: Microsoft Windows Live Mail 12.0.1365
| X-MimeOLE: Produced By Microsoft MimeOLE V12.0.1365
| X-MS-CommunityGroup-MessageCategory:
{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| X-MS-CommunityGroup-PostID: {796FBBA1-C9E7-48E4-9B75-F8C661593AD7}
| Newsgroups:
microsoft.public.windows.server.general,microsoft.public.windows.vista.netwo
rking_sharing,microsoft.public.windows.vista.performance_maintenance
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.networking_sharing:16774
microsoft.public.windows.vista.performance_maintenance:14786
microsoft.public.windows.server.general:26000
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.vista.networking_sharing
|
| Hi,
| How can I view event logs on a remote machine running Vista? I can
view
| remote events on machines running XP and 2003 but not Vista..... The
Vista
| machine all have their remote registry service running already. But when
I
| connect to a remote machine via event viewer, it always complain that rpc
| server is not available......
|
| Please help.
|
| Marshall
|
|
 
M

mlai

Thanks for the link. Followed the link, added the DWORD to the registry and
rebooted. Fired up Event view and tried to connect to a remote machine.
Same error of RPC Server unavailable.....
 
K

Kerry Brown

The change has to be done on the remote machine if the remote machine is
running Vista.
 
R

Robert L. \(MS-MVP\)

You may also need to add TCP port 135 to the firewall. This link may help.

Remote Management Issues
http://www.chicagotech.net/Windows/remotemgr.htm

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com


"Helen Li [MSFT]" said:
Dear Marshall,

This issue can be reproduced on my side and when connecting to a Windows
Vista computer from another Windows Vista system, the following error
appears:
Event Viewer cannot connect to computer computer_name and the reported
error: "The RPC server is unavailable".

It is related to the default settings on the Windows Firewall and we can
take the following steps to eliminate this error:

1. Click Start and enter firewall.cpl in the Start Search. Press Enter.
2. In the left tasks pane, click Allow a program through Windows Firewall.
3. Under the Exceptions tab, ensure "Remote Administration" and "Remote
Event Log Management" are checked.
4. Click Apply and OK.

If you have any concerns on the above, please feel free to post back and I
am happy to answer any of your questions.

Regards,

Helen Li, MCSE 2003

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
| From: "mlai" <[email protected]>
| Subject: Vista Remote Event Log viewer
| Date: Mon, 5 Nov 2007 09:11:47 +0800
| Lines: 1
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| Importance: Normal
| X-Newsreader: Microsoft Windows Live Mail 12.0.1365
| X-MimeOLE: Produced By Microsoft MimeOLE V12.0.1365
| X-MS-CommunityGroup-MessageCategory:
{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| X-MS-CommunityGroup-PostID: {796FBBA1-C9E7-48E4-9B75-F8C661593AD7}
| Newsgroups:
microsoft.public.windows.server.general,microsoft.public.windows.vista.netwo
rking_sharing,microsoft.public.windows.vista.performance_maintenance
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.networking_sharing:16774
microsoft.public.windows.vista.performance_maintenance:14786
microsoft.public.windows.server.general:26000
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.vista.networking_sharing
|
| Hi,
| How can I view event logs on a remote machine running Vista? I can
view
| remote events on machines running XP and 2003 but not Vista..... The
Vista
| machine all have their remote registry service running already. But
when
I
| connect to a remote machine via event viewer, it always complain that
rpc
| server is not available......
|
| Please help.
|
| Marshall
|
|
 
M

mlai

Thanks. Anyway to do this via a group policy object?
"Helen Li [MSFT]" said:
Dear Marshall,

This issue can be reproduced on my side and when connecting to a Windows
Vista computer from another Windows Vista system, the following error
appears:
Event Viewer cannot connect to computer computer_name and the reported
error: "The RPC server is unavailable".

It is related to the default settings on the Windows Firewall and we can
take the following steps to eliminate this error:

1. Click Start and enter firewall.cpl in the Start Search. Press Enter.
2. In the left tasks pane, click Allow a program through Windows Firewall.
3. Under the Exceptions tab, ensure "Remote Administration" and "Remote
Event Log Management" are checked.
4. Click Apply and OK.

If you have any concerns on the above, please feel free to post back and I
am happy to answer any of your questions.

Regards,

Helen Li, MCSE 2003

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
| From: "mlai" <[email protected]>
| Subject: Vista Remote Event Log viewer
| Date: Mon, 5 Nov 2007 09:11:47 +0800
| Lines: 1
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| Importance: Normal
| X-Newsreader: Microsoft Windows Live Mail 12.0.1365
| X-MimeOLE: Produced By Microsoft MimeOLE V12.0.1365
| X-MS-CommunityGroup-MessageCategory:
{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| X-MS-CommunityGroup-PostID: {796FBBA1-C9E7-48E4-9B75-F8C661593AD7}
| Newsgroups:
microsoft.public.windows.server.general,microsoft.public.windows.vista.netwo
rking_sharing,microsoft.public.windows.vista.performance_maintenance
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.networking_sharing:16774
microsoft.public.windows.vista.performance_maintenance:14786
microsoft.public.windows.server.general:26000
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.vista.networking_sharing
|
| Hi,
| How can I view event logs on a remote machine running Vista? I can
view
| remote events on machines running XP and 2003 but not Vista..... The
Vista
| machine all have their remote registry service running already. But
when
I
| connect to a remote machine via event viewer, it always complain that
rpc
| server is not available......
|
| Please help.
|
| Marshall
|
|
 
M

mlai

Thanks! but I didn't specifically enable the TCP port 135 and it still
worked....
Robert L. (MS-MVP) said:
You may also need to add TCP port 135 to the firewall. This link may help.

Remote Management Issues
http://www.chicagotech.net/Windows/remotemgr.htm

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com


"Helen Li [MSFT]" said:
Dear Marshall,

This issue can be reproduced on my side and when connecting to a Windows
Vista computer from another Windows Vista system, the following error
appears:
Event Viewer cannot connect to computer computer_name and the reported
error: "The RPC server is unavailable".

It is related to the default settings on the Windows Firewall and we can
take the following steps to eliminate this error:

1. Click Start and enter firewall.cpl in the Start Search. Press Enter.
2. In the left tasks pane, click Allow a program through Windows
Firewall.
3. Under the Exceptions tab, ensure "Remote Administration" and "Remote
Event Log Management" are checked.
4. Click Apply and OK.

If you have any concerns on the above, please feel free to post back and
I
am happy to answer any of your questions.

Regards,

Helen Li, MCSE 2003

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
| From: "mlai" <[email protected]>
| Subject: Vista Remote Event Log viewer
| Date: Mon, 5 Nov 2007 09:11:47 +0800
| Lines: 1
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| Importance: Normal
| X-Newsreader: Microsoft Windows Live Mail 12.0.1365
| X-MimeOLE: Produced By Microsoft MimeOLE V12.0.1365
| X-MS-CommunityGroup-MessageCategory:
{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| X-MS-CommunityGroup-PostID: {796FBBA1-C9E7-48E4-9B75-F8C661593AD7}
| Newsgroups:
microsoft.public.windows.server.general,microsoft.public.windows.vista.netwo
rking_sharing,microsoft.public.windows.vista.performance_maintenance
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.networking_sharing:16774
microsoft.public.windows.vista.performance_maintenance:14786
microsoft.public.windows.server.general:26000
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.vista.networking_sharing
|
| Hi,
| How can I view event logs on a remote machine running Vista? I can
view
| remote events on machines running XP and 2003 but not Vista..... The
Vista
| machine all have their remote registry service running already. But
when
I
| connect to a remote machine via event viewer, it always complain that
rpc
| server is not available......
|
| Please help.
|
| Marshall
|
|
 
M

mlai

Never mind. Done it thru group policy and everything is working fine.
Thankyou very much!
"Helen Li [MSFT]" said:
Dear Marshall,

This issue can be reproduced on my side and when connecting to a Windows
Vista computer from another Windows Vista system, the following error
appears:
Event Viewer cannot connect to computer computer_name and the reported
error: "The RPC server is unavailable".

It is related to the default settings on the Windows Firewall and we can
take the following steps to eliminate this error:

1. Click Start and enter firewall.cpl in the Start Search. Press Enter.
2. In the left tasks pane, click Allow a program through Windows Firewall.
3. Under the Exceptions tab, ensure "Remote Administration" and "Remote
Event Log Management" are checked.
4. Click Apply and OK.

If you have any concerns on the above, please feel free to post back and I
am happy to answer any of your questions.

Regards,

Helen Li, MCSE 2003

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
| From: "mlai" <[email protected]>
| Subject: Vista Remote Event Log viewer
| Date: Mon, 5 Nov 2007 09:11:47 +0800
| Lines: 1
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| Importance: Normal
| X-Newsreader: Microsoft Windows Live Mail 12.0.1365
| X-MimeOLE: Produced By Microsoft MimeOLE V12.0.1365
| X-MS-CommunityGroup-MessageCategory:
{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| X-MS-CommunityGroup-PostID: {796FBBA1-C9E7-48E4-9B75-F8C661593AD7}
| Newsgroups:
microsoft.public.windows.server.general,microsoft.public.windows.vista.netwo
rking_sharing,microsoft.public.windows.vista.performance_maintenance
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.networking_sharing:16774
microsoft.public.windows.vista.performance_maintenance:14786
microsoft.public.windows.server.general:26000
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.vista.networking_sharing
|
| Hi,
| How can I view event logs on a remote machine running Vista? I can
view
| remote events on machines running XP and 2003 but not Vista..... The
Vista
| machine all have their remote registry service running already. But
when
I
| connect to a remote machine via event viewer, it always complain that
rpc
| server is not available......
|
| Please help.
|
| Marshall
|
|
 
H

Helen Li [MSFT]

Hello Marshall,

Thanks for your reply!

It is great to hear that the information I provided is useful for you.

Regards,

Helen Li, MCSE 2003

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "mlai" <[email protected]>
| References: <[email protected]>
<[email protected]>
| In-Reply-To: <[email protected]>
| Subject: Re: Vista Remote Event Log viewer
| Date: Tue, 6 Nov 2007 11:48:45 +0800
| Lines: 87
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
| X-MIMEOLE: Produced By Microsoft MimeOLE V6.0.6000.16545
| X-MS-CommunityGroup-PostID: {11688B6D-D9C6-4E76-AF02-18679E39345D}
| X-MS-CommunityGroup-ThreadID: 796FBBA1-C9E7-48E4-9B75-F8C661593AD7
| X-MS-CommunityGroup-ParentID: 822D202C-AD30-4EA0-8116-E32C8BC12BA7
| Newsgroups: microsoft.public.windows.vista.networking_sharing
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.networking_sharing:16851
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.vista.networking_sharing
|
| Never mind. Done it thru group policy and everything is working fine.
| Thankyou very much!
| | > Dear Marshall,
| >
| > This issue can be reproduced on my side and when connecting to a Windows
| > Vista computer from another Windows Vista system, the following error
| > appears:
| > Event Viewer cannot connect to computer computer_name and the reported
| > error: "The RPC server is unavailable".
| >
| > It is related to the default settings on the Windows Firewall and we can
| > take the following steps to eliminate this error:
| >
| > 1. Click Start and enter firewall.cpl in the Start Search. Press Enter.
| > 2. In the left tasks pane, click Allow a program through Windows
Firewall.
| > 3. Under the Exceptions tab, ensure "Remote Administration" and "Remote
| > Event Log Management" are checked.
| > 4. Click Apply and OK.
| >
| > If you have any concerns on the above, please feel free to post back
and I
| > am happy to answer any of your questions.
| >
| > Regards,
| >
| > Helen Li, MCSE 2003
| >
| > Microsoft Online Partner Support
| > Get Secure! - www.microsoft.com/security
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| > --------------------
| > | From: "mlai" <[email protected]>
| > | Subject: Vista Remote Event Log viewer
| > | Date: Mon, 5 Nov 2007 09:11:47 +0800
| > | Lines: 1
| > | Message-ID: <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | format=flowed;
| > | charset="iso-8859-1";
| > | reply-type=original
| > | Content-Transfer-Encoding: 7bit
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | Importance: Normal
| > | X-Newsreader: Microsoft Windows Live Mail 12.0.1365
| > | X-MimeOLE: Produced By Microsoft MimeOLE V12.0.1365
| > | X-MS-CommunityGroup-MessageCategory:
| > {E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| > | X-MS-CommunityGroup-PostID: {796FBBA1-C9E7-48E4-9B75-F8C661593AD7}
| > | Newsgroups:
| >
microsoft.public.windows.server.general,microsoft.public.windows.vista.netwo
| > rking_sharing,microsoft.public.windows.vista.performance_maintenance
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windows.vista.networking_sharing:16774
| > microsoft.public.windows.vista.performance_maintenance:14786
| > microsoft.public.windows.server.general:26000
| > | NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| > | X-Tomcat-NG: microsoft.public.windows.vista.networking_sharing
| > |
| > | Hi,
| > | How can I view event logs on a remote machine running Vista? I
can
| > view
| > | remote events on machines running XP and 2003 but not Vista..... The
| > Vista
| > | machine all have their remote registry service running already. But
| > when
| > I
| > | connect to a remote machine via event viewer, it always complain that
| > rpc
| > | server is not available......
| > |
| > | Please help.
| > |
| > | Marshall
| > |
| > |
| >
|
|
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top