Access to Event Logs Denied

Discussion in 'Server Migration' started by Geoff Hall, Jun 29, 2004.

  1. Geoff Hall

    Geoff Hall Guest

    I have a problem,
    After performing a user and group migration between an NT4 Domain to a new
    2K3 Domain this morning I now find the Administrator is no longer allowed
    access to all of the event logs except security!.
    Everthing seemed to go fine all 1800 user accounts came across with
    passwords without a hitch

    I had prepared a secondary Admin account beforehand that did not exist in
    the source domain this works fine and has access to all of the event logs.

    What could have gone wrong? How can I re-instate the administrators account
    with all of the correct permissions?

    TIA

    Geoff Hall
     
    Geoff Hall, Jun 29, 2004
    #1
    1. Advertisements

  2. Hi Geoff,

    Thanks for your posting here.

    Do you mean that your new domain administrator account cannot access the
    event logs on the new Windows 2000 DC?

    The problem can occur if your user account that is in the administrators
    group is also in the Guests and Domain Guests group. If so , please remove
    membership of Guest and Domain Guest groups.

    If the problem still persists, I recommend that you check the security
    settings of the %systemroot%\system32\config\appEvent.evt file and manually
    add your account to the permission list.

    Have a nice day!

    Regards,
    Bob Qin
    Product Support Services
    Microsoft Corporation

    Get Secure! - www.microsoft.com/security

    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Bob Qin [MSFT], Jun 30, 2004
    #2
    1. Advertisements

  3. Geoff Hall

    Geoff Hall Guest

    Thanks Bob,
    Yes.

    I really should have noticed this one, as you said the Administrator account
    of the NT4 Source Domain had been made a member of both the Guest Groups in
    it's previous life.
    The migration had indeed transferred these group memberships to the new 2k3
    domain administrator account.

    Moral - always carry out a thorough audit of your source domain and examine
    the results before committing these changes.

    Geoff Hall
     
    Geoff Hall, Jun 30, 2004
    #3
  4. Hi Geoff,

    I am glad to hear that the problem has been resolved.

    If you have any further questions or concerns, please feel free to post
    here. It is our pleasure to be of assistance.

    Thanks again for using Microsoft News Group!

    Regards,
    Bob Qin
    Product Support Services
    Microsoft Corporation

    Get Secure! - www.microsoft.com/security

    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Bob Qin [MSFT], Jul 1, 2004
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.