is this a GP issue?

  • Thread starter Thread starter M Temperton
  • Start date Start date
M

M Temperton

Hi folks

Over the last week or so after a DC is booted I get an access denied when
trying to open 'system log' and 'application log' in event viewer. I found a
work around by opening respective .evt log file (system in this eg) at
winnt\system32\config\system.evt which creates 'copy of system log'. I then
refresh and and am able to open system log and delete the copy. Hereon after
everything works fine until next boot.

I know this sounds like a corrupted file but this happens on all DC's in the
domain regardless of which user account I use and has no effect on member
servers or clients

All DC's are W2K SP4 fully patched

Thanks in advance and Merry Christmas

Martin
 
Hello Martin.

This sounds like a issue or configration of Local Security Policy or Domain
Controller Security Policy.

How ever it can be a Group Policy issue, or configration in the Default
Domin Controller Policy for the Domain Controllers OU if you know you have
change it.

To found out if this issue are applied by any GPO, use the tool gpresult.

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp

You can also try to disable the Default Domain Controller Policy and se what
happens.
 
Hello Chris,

Take a look at the following policy for the Default Domain and/or Default
Domain Controller OU:

Computer Config; Windows Settings; Security Settings; User Rights
Assignment; Manage Auditing and Security Log.

Administrators should be in there.


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top