Welcome to WinForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Event Viewer cannont connect to remote WinXP SP2 event vie..

 
Goto page Previous  1, 2, 3, 4, 5
   Windows XP Arc2 (Home) -> Security Admin RSS
Next:  Offline files stop working at reboot  
Author Message
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 16) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen RemoveThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville RemoveThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen RemoveThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville RemoveThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>

 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 17) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.TakeThisOut@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.TakeThisOut@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen.TakeThisOut@online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville.TakeThisOut@nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>

 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 18) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 19) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 20) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.DeleteThis@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.DeleteThis@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen.DeleteThis@online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville.DeleteThis@nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 21) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 22) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 23) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 24) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600
>>>Lines: 75
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#SaaqOQ$GHA.3480@TK2MSFTNGP04.phx.gbl>
>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windowsxp.security_admin:192363
>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>
>>>Thanks for suggestion. I confirmed that is "remote registery" service is
>>>already running on all the WinXP SP2 PCs. So that is not the problem.
>>>Further thoughts?
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen DeleteThis @online.microsoft.com> wrote in message
>>>news:LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> From your description, it appears that the "remote registry" service is
>>>> not
>>>> running.
>>>>
>>>> Please run "services.msc" and find "remote resigry" service to start
>>>> it.
>>>>
>>>> Then, check this issue again.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>From: "Russell" <Clarksville DeleteThis @nospam.nospam>
>>>>>>Subject: Event Viewer cannont connect to remote WinXP SP2 event viewer
>>>>>>Date: Mon, 30 Oct 2006 14:58:53 -0600
>>>>>>Lines: 15
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>Message-ID: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windowsxp.security_admin
>>>>>>NNTP-Posting-Host: nsc64.90.20-10.newsouth.net 64.90.20.10
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windowsxp.security_admin:192320
>>>>>>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>>>>>
>>>>>>Within EVENTVWR.MSC, Select Connect to Another Computer.
>>>>>>
>>>>>>I successfully connect to any remote Windows 2003 or 2000 event viewer
>>>> logs.
>>>>>>I always fail when connecting to remote WinXP SP2 machines. Error is:
>>>>>>
>>>>>>"Unable to connect to the computer 'computer name or ip address here'
>>>> The
>>>>>>error was Access Denied."
>>>>>>
>>>>>>I am logged on to local PC with a domain account that is member of
> Domain
>>>>>>Admins. All PCs are domain members. I have turned off Windows
>>>>>>Firewall
>>>> on
>>>>>>remote Win XP machines. This is all being done on a private LAN
> segment.
>>>>>>(i.e. no firewalls other than Windows Firewall involved.) Does not
> seem
>>>> to
>>>>>>be AV related either. Would appreciate any suggestions. thanks,
> Russell
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>
 >> Stay informed about: Event Viewer cannont connect to remote WinXP SP2 event vie.. 
Back to top
Login to vote
Russell

External


Since: Oct 30, 2006
Posts: 40



(Msg. 25) Posted: Thu Nov 02, 2006 2:18 pm
Post subject: Re: Event Viewer cannont connect to remote WinXP SP2 event viewer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

WOW!! I would have never figured that out. That fixed it.

Further info: the Local Service account permission that you identified was
being lost when we joined a PC to the domain. We had to use a computer
group policy to correct the problem.

Thank you very much!

"Vincent Xu [MSFT]" <v-xuwen.RemoveThis@online.microsoft.com> wrote in message
news:A$7RjkZ$GHA.3164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Go to the following registry key:
>
> HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
>
> Check if the Local Service account have Query Value, Enumnerate Subkeys,
> Notify, and Read Control allowed permission.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>From: "Russell" <Clarksville.RemoveThis@nospam.nospam>
>>>References: <OxeLmZG$GHA.2180@TK2MSFTNGP05.phx.gbl>
> <LBMxrLL$GHA.1984@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: Event Viewer cannont connect to remote WinXP SP2 event
>>>viewer
>>>Date: Tue, 31 Oct 2006 09:45:53 -0600