General discussion

Locked

Event Viewer System Logs

By Rabbit_Runner ·
Hi, We have a Win2K server(SP2) which is in a workgroup. There is a special application running on this box, and the developers (in another location) have given us a patch to apply. This was done last week. Now, we are not able to access the System log in the event viewer. The local administrator does not have the permissions to open the file. error is 'access denied'. We have checked the log files in %system root%\system32\config folder and the normal permissions are applied to all of the files. We have checked the Group policy and are not able to find any thing which has been changed. Also the developers do not have any idea what may have caused this. The Application log and the Security log, can be viewed with no problem. We havechecked Technet and the only article that seems to apply is Q245128. This has been done, but has not corrected the problem. Is there some setting that we still need to check? Thanks.

This conversation is currently closed to new comments.

11 total posts (Page 2 of 2)   Prev   01 | 02
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Event Viewer System Logs

by quintar51 In reply to Event Viewer System Logs

I also found a way to delete the system log and have a new one recreated.

you can start a registry editor locally or if you have remote registry access, change the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Start value from 0x02 to 0x04 and reboot.

Various services will fail at reboot. Delete the system event log, %SystemRoot%\system32\config\Sysevent.evt.

Change the Start value in the registry back to 0x02 and reboot. The system will automatically generate a new system log.

Back to Windows Forum
11 total posts (Page 2 of 2)   Prev   01 | 02

Related Discussions

Related Forums