Event Viewer Security log Access denied

[Tim Nichols]

I have a brand new Dell Optiplex desktop computer running Windows XP
Professional SP1. I have noticed a strange issue happening with this
computer regarding the Security log in Event Viewer.

I had the computer joined to our domain, and was able to log on with my
domain admin account and install software and perform administrative
functions like I normally do. However, when I tried to view the security
log in Event Viewer, I received the following error message:

"Unable to complete the operation on "Security". A required priviledge is
not held by the client."

When I click OK there are no events displayed in the security log, and a red
"x" is on the icon.

This occurred even if I logged on with the local administrator account.

To troubleshoot this issue, I disjoined the computer from the domain,
rebooted the computer, and verified in Active Directory that the computer
was removed. I then logged on to the computer with the local administrator
account and checked the security log, and I was able to view the events with
no problem.

I joined the computer to the domain once again, and it went right back to
the same problems. I checked the local administrators group and the proper
group memberships (domain admins, local administrator) were there.

I have other Dell Optiplex desktops in our domain running the same setup
that do not have this problem.

Does anyone know what to check to fix this issue?

Thanks,

-Tim Nichols
Microsoft Certified Professional

 

[techguru100]

The permissons for "Manage Auditing and Security Log" are
not set correctly. Go into GPEDIT.MSC, User Rights
Assessment, then open the "Manage Auditing and..."

 

[Kelly]

Hi Tim,

Do some reading here and good luck! http://tinyurl.com/yrwv8

 

[Tim Nichols]

This fixed my problem. Thanks alot!

-Tim

The permissons for "Manage Auditing and Security Log" are
not set correctly. Go into GPEDIT.MSC, User Rights
Assessment, then open the "Manage Auditing and..."