Hello,
Please execute the command "whoami /all". List the groups that the user is
member of. Also open the local guests group, domain guests group and check
for membership. By default, there on two members: "Domain Guests" group and
the Guest account. If there are other members, please remove it
I see almost all the previous issues were resolved by removing the affected
user from the guests group.
Let us the result.
regards,
Rashmi
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Access is Denied to Event Viewer logs
| thread-index: AcS8MMRbDRNlHGGgRLuWiQ21R+QJ+A==
| X-WBNR-Posting-Host: 80.229.39.11
| From: "=?Utf-8?B?QWFyb24gWW91bmc=?="
<
[email protected]>
| References: <
[email protected]>
<
[email protected]>
| Subject: RE: Access is Denied to Event Viewer logs
| Date: Wed, 27 Oct 2004 07:25:11 -0700
| Lines: 72
| Message-ID: <
[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.win2000.security
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
| Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.security:33587
| X-Tomcat-NG: microsoft.public.win2000.security
|
| Hi Rashmi,
|
| I am afraid the Administrator is not a member of the Guest group.
|
| Thanks for the help anyway.
|
| Regards,
|
| Aaron
|
| "Rashmi.K.Y [MSFT]" wrote:
|
| > Hello,
| >
| > Thank you for posting.
| >
| > I understand that the administrator is unable to view the event logs
and
| > the system displays error message.
| >
| > Please check if the administrator is the member of guest group. If yes,
| > please remove the membership for administrator. Now check if you are
able
| > to view the logs.
| >
| > I hope the above information helps to resolve your issue. If there is
| > anything unclear, please feel free to let me know. Thank you and have a
| > nice day!
| >
| > Rashmi
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: Access is Denied to Event Viewer logs
| > | thread-index: AcS7cVzZHUBPVRJqSLGnpfiM/6p/Ng==
| > | X-WBNR-Posting-Host: 80.229.39.11
| > | From: "=?Utf-8?B?QWFyb24gWW91bmc=?="
| > <
[email protected]>
| > | Subject: Access is Denied to Event Viewer logs
| > | Date: Tue, 26 Oct 2004 08:35:03 -0700
| > | Lines: 12
| > | Message-ID: <
[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.win2000.security
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
| > | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.security:33552
| > | X-Tomcat-NG: microsoft.public.win2000.security
| > |
| > | Hi,
| > |
| > | I don't know what has happened but the Administrator is not able to
view
| > the
| > | logs in the Event Viewer except the Security log. When any of the
logs
| > are
| > | selected (the Application log in this example), the message "Unable
to
| > | complete the operation on 'Application'. Access is denied".
| > |
| > | Any help on this will be greatly appreciated!!
| > |
| > | Regards,
| > |
| > | Aaron Young
| > |
| >
| >
|
