Non-Administrators Not Allowed Access to Change Log Settings

 Last reviewed: February 25, 1998
Article ID: Q173367
The information in this article applies to:
  • Microsoft Windows NT Workstation versions 3.51 and 4.0
  • Microsoft Windows NT Server versions 3.51 and 4.0
WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall Windows 95. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

IMPORTANT: This article contains information about editing the registry. Before you edit the registry, you should first make a backup copy of the registry files (System.dat and User.dat). Both are hidden files in the Windows folder.

SYMPTOMS

When a user who does not have administrative privileges tries to change the log settings in the Event Viewer and clicks OK, the following message appears: 

   Access is Denied.

MORE INFORMATION

The user or group account that needs to change its settings must be given full control of the following registry key and its subkeys: 

   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog
To do this, edit the registry with Regedit.exe using the following steps. You must have administrative access to do so.

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall Windows 95. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the Changing Keys and Values online Help topic in Registry Editor (Regedit.exe). Note that you should make a backup copy of the registry files (System.dat and User.dat) before you edit the registry.

  1. Start Registry Editor and select the following registry subkey: 

          HKLM\SYSTEM\CurrentControlSet\Services\EventLog

  2. Click Permissions on the Security menu.

  3. Add the necessary user or group account to the list and change the Type of Access to Full Control.

  4. Click the box for Replace Permissions on Existing Subkeys, and then click OK.

Additional reference words: appevent secevent sysevent size maximum
overwrite older as needed clear manually wrapping
Keywords : nt32ap ntdomain nthowto ntregistry ntsecurity NTSrvWkst
Version : WinNT:3.51,4.0
Platform : winnt
Hardware : x86
Issue type : kbprb

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: February 25, 1998
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.