Non-Administrators Not Allowed Access to Change Log Settings

• Microsoft Windows NT Workstation versions 3.51, 4.0
• Microsoft Windows NT Server versions 3.51, 4.0

SYMPTOMS

When a user who does not have administrative privileges tries to change the log settings in the Event Viewer and clicks OK, the following message appears:

Access is Denied.

MORE INFORMATION

The user or group account that needs to change its settings must be given full control of the following registry key and its subkeys:


HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog

To do this, edit the registry with Regedit.exe using the following steps. You must have administrative access to do so.

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall Windows 95. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the Changing Keys and Values online Help topic in Registry Editor (Regedit.exe). Note that you should make a backup copy of the registry files (System.dat and User.dat) before you edit the registry.

1. Start Registry Editor and select the following registry subkey:
   HKLM\SYSTEM\CurrentControlSet\Services\EventLog



2. Click Permissions on the Security menu.



3. Add the necessary user or group account to the list and change the Type of Access to Full Control.



4. Click the box for Replace Permissions on Existing Subkeys, and then click OK.

Additional query words: appevent secevent sysevent size maximum overwrite older as needed clear manually wrapping

Keywords : ntdomain ntsecurity nthowto nt32ap ntregistry NTSrvWkst
Version : WinNT:3.51,4.0
Platform : winnt
Issue type : kbprb