I have multiple server/windows os’s to access from a NON admin user account for auditing/monitoring the security event logs for intrusion/lockouts.
1. The Remote registy service has to be disabled for security reasons.
2. The security staff monitoring may not have administrator rights, to protect evidenciary integrity.
3. The remote servers comprise of NT,2000 and 2003.
1. Results in the error log descriptions not being reflected.
2. The lack of admin rights prevent the use of /auxsource flag or remote dll file useage.
3. The NT4, 2000 and 2003 error description formats vary as does the machine from where the extract was run ie. XP,98 etc. which provides their own dll translation in the absence of remote resolution of error details.
Which of these 3 head aches are solveable and how.
Appreciate any input.