Welcome to WinForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Event Viewer cannont connect to remote WinXP SP2 event vie..

 
Goto page 1, 2, 3, 4, 5
   Windows XP Arc2 (Home) -> Security Admin RSS
Next:  Offline files stop working at reboot  
Author Message
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 1) Posted: Mon Oct 30, 2006 2:58 pm
Post subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

Within EVENTVWR.MSC, Select Connect to Another Computer.

I successfully connect to any remote Windows 2003 or 2000 event viewer logs.
I always fail when connecting to remote WinXP SP2 machines. Error is:

"Unable to connect to the computer 'computer name or ip address here' The
error was Access Denied."

I am logged on to local PC with a domain account that is member of Domain
Admins. All PCs are domain members. I have turned off Windows Firewall on
remote Win XP machines. This is all being done on a private LAN segment.
(i.e. no firewalls other than Windows Firewall involved.) Does not seem to
be AV related either. Would appreciate any suggestions. thanks, Russell

 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Vincent Xu [MSFT]

External


Since: May 16, 2005
Posts: 104



(Msg. 2) Posted: Tue Oct 31, 2006 2:57 am
Post subject: RE: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hi,

From your description, it appears that the "remote registry" service is not
running.

Please run "services.msc" and find "remote resigry" service to start it.

Then, check this issue again.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>Lines: 15
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>X-RFC2646: Format=Flowed; Original
>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>Newsgroups: microsoft.public.windowsxp.security_admin
>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windowsxp.security_admin:192320
>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>
>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>
>>I successfully connect to any remote Windows 2003 or 2000 event viewer
logs.
>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>
>>"Unable to connect to the computer 'computer name or ip address here'
The
>>error was Access Denied."
>>
>>I am logged on to local PC with a domain account that is member of Domain
>>Admins. All PCs are domain members. I have turned off Windows Firewall
on
>>remote Win XP machines. This is all being done on a private LAN segment.
>>(i.e. no firewalls other than Windows Firewall involved.) Does not seem
to
>>be AV related either. Would appreciate any suggestions. thanks, Russell
>>
>>
>>

 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 3) Posted: Tue Oct 31, 2006 9:45 am
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Thanks for suggestion. I confirmed that is "remote registery" service is
already running on all the WinXP SP2 PCs. So that is not the problem.
Further thoughts?

"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> From your description, it appears that the "remote registry" service is
> not
> running.
>
> Please run "services.msc" and find "remote resigry" service to start it.
>
> Then, check this issue again.
>
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>Lines: 15
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192320
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>
>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
> logs.
>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>
>>>"Unable to connect to the computer 'computer name or ip address here'
> The
>>>error was Access Denied."
>>>
>>>I am logged on to local PC with a domain account that is member of Domain
>>>Admins. All PCs are domain members. I have turned off Windows Firewall
> on
>>>remote Win XP machines. This is all being done on a private LAN segment.
>>>(i.e. no firewalls other than Windows Firewall involved.) Does not seem
> to
>>>be AV related either. Would appreciate any suggestions. thanks, Russell
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Vincent Xu [MSFT]

External


Since: May 16, 2005
Posts: 104



(Msg. 4) Posted: Wed Nov 01, 2006 6:02 am
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hi,

Go to the following registry key:

HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg

Check if the Local Service account have Query Value, Enumnerate Subkeys,
Notify, and Read Control allowed permission.

Thanks.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
<LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>Lines: 75
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>X-RFC2646: Format=Flowed; Original
>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>Newsgroups: microsoft.public.windowsxp.security_admin
>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windowsxp.security_admin:192363
>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>
>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>Further thoughts?
>>
>>"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>> Hi,
>>>
>>> From your description, it appears that the "remote registry" service is
>>> not
>>> running.
>>>
>>> Please run "services.msc" and find "remote resigry" service to start it.
>>>
>>> Then, check this issue again.
>>>
>>>
>>> Best regards,
>>>
>>> Vincent Xu
>>> Microsoft Online Partner Support
>>>
>>> ======================================================
>>> Get Secure! - www.microsoft.com/security
>>> ======================================================
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others
>>> may learn and benefit from this issue.
>>> ======================================================
>>> This posting is provided "AS IS" with no warranties,and confers no
rights.
>>> ======================================================
>>>
>>>
>>>
>>> --------------------
>>>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>Lines: 15
>>>>>X-Priority: 3
>>>>>X-MSMail-Priority: Normal
>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>X-RFC2646: Format=Flowed; Original
>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>> microsoft.public.windowsxp.security_admin:192320
>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>
>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>
>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>> logs.
>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>
>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>> The
>>>>>error was Access Denied."
>>>>>
>>>>>I am logged on to local PC with a domain account that is member of
Domain
>>>>>Admins. All PCs are domain members. I have turned off Windows Firewall
>>> on
>>>>>remote Win XP machines. This is all being done on a private LAN
segment.
>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
seem
>>> to
>>>>>be AV related either. Would appreciate any suggestions. thanks,
Russell
>>>>>
>>>>>
>>>>>
>>>
>>
>>
>>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 5) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 6) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 7) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen RemoveThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville RemoveThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen RemoveThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville RemoveThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 8) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen RemoveThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville RemoveThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen RemoveThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville RemoveThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 9) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 10) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 11) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.DeleteThis@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.DeleteThis@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen.DeleteThis@online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville.DeleteThis@nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote