Announcement

Collapse
No announcement yet.

non admin to access sec event logs in DC?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • non admin to access sec event logs in DC?

    Hi All,

    I am preparing for an IT audit on my Win 2003 DC.

    How do I allow my auditors/manager (non admin group) to view security event logs on my DC?

    I prefer to give them "event viewer" MMC snap in as their viewing console.

    Thank you for your help.

    znme

  • #2
    Re: non admin to access sec event logs in DC?

    Hello,

    Here is the Microsoft KB witch describe how to set the event logs security
    http://support.microsoft.com/kb/323076

    Basically if just want to assign the same security like the Application log has,
    edit the
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\Eventlog\Security\CustomSD and replace its value with
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\Eventlog\Application\CustomSD
    Warning!!
    Back up your registry before you operate any modification!

    Regards,
    Csaba
    Last edited by netxt; 14th April 2006, 15:19.
    Regards,
    Csaba Papp
    MCSA+messaging, MCSE, CCNA
    ...............................
    Remember to give credit where credit is due and leave reputation points where appropriate
    .................................

    Comment

    Working...
    X