Permissions needed to read event log messages remotely?
Posted
by
Neolisk
on Server Fault
See other posts from Server Fault
or by Neolisk
Published on 2012-09-17T20:40:16Z
Indexed on
2012/09/17
21:41 UTC
Read the original article
Hit count: 255
windows-server-2003
|event-log
When running under a limited account, local event log messages are displaying fine, for remote computer I am getting this error:
The description for Event ID ( xxxxx ) in Source ( yyyyy ) cannot be found.
The local computer may not have the necessary registry information or message
DLL files to display messages from a remote computer. You may be able to use the
/AUXSOURCE= flag to retrieve this description; see Help and Support for details.
The following information is part of the event: zzzzz.
Same remote computer works fine under domain administrator. I am currently experimenting with just the Event Viewer, by using Run As. Original issue is a PowerShell script which does Get-EventLog.
Are there any special permissions that need to be in place to able to read event log messages remotely? Supposedly there is a simple solution in Windows 2008 and higher, i.e. just add user to Event Log Readers group. Is there anything like that for Windows 2003?
© Server Fault or respective owner