I am trying to grant access to an AD group to read the Application and System Event logs. Microsoft have posted a solution to this to add the user to Performance Log Users local account. This doesn't work. I have granted permission on the actual config folder in system32 where the logs live and the group still gets the permission denied message. I have also granted permission in the registry to the above mentioned folders and still no joy. I have read a few posts that suggest there is a string that needs to be added directly into the registry to grant this permission but I really don't want to have to do this for every server 2003 in my domain. The users can access server 2000 app logs fine. Surely there is an easy fix for this!
Login or Sign Up
- Log in with