Permissions needed to read event log messages remotely?

Posted by Neolisk on Server Fault See other posts from Server Fault or by Neolisk
Published on 2012-09-17T20:40:16Z Indexed on 2012/09/17 21:41 UTC
Read the original article Hit count: 258

When running under a limited account, local event log messages are displaying fine, for remote computer I am getting this error:

The description for Event ID ( xxxxx ) in Source ( yyyyy ) cannot be found.
The local computer may not have the necessary registry information or message 
DLL files to display messages from a remote computer. You may be able to use the
/AUXSOURCE= flag to retrieve this description; see Help and Support for details.
The following information is part of the event: zzzzz.

Same remote computer works fine under domain administrator. I am currently experimenting with just the Event Viewer, by using Run As. Original issue is a PowerShell script which does Get-EventLog.

Are there any special permissions that need to be in place to able to read event log messages remotely? Supposedly there is a simple solution in Windows 2008 and higher, i.e. just add user to Event Log Readers group. Is there anything like that for Windows 2003?

© Server Fault or respective owner

Related posts about windows-server-2003

Related posts about event-log