Wednesday, July 21, 2010

Windows Eventlog error 5: Access denied

To solve a general access denied error in Windows 2008 R2, restore the default permissions on %SystemRoot%\System32\winevt\logs.

This is the list of rights to apply:

  • Authenticated user - List folder/read data, Read attributes, Read Extended attributes, Read permissions
  • Administrators - Full control
  • SYSTEM - Full control
  • NT SERVICE\EventLog - Full control

2 comments:

  1. This applies to this kind of errors:

    Source: Microsoft-Windows-Eventlog
    Event ID: 23
    Task Category: Service startup
    Level: Error
    Keywords: Service availability, 0x8000000000020000, InitChannelLoggingFailure,
    Error Code="5"
    User: LOCAL SERVICE

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-Wired-AutoConfig/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-Winsock-WS2HELP/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-WFP/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-WER-Diag/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-VHDMP/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-VDRVROOT/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-Security-Configuration-Wizard/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-NTLM/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-Kernel-WDI/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-EapHost/Operational.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-DhcpNap/Admin.

    The event logging service encountered an error (res=5) while initializing logging resources for channel Microsoft-Windows-API-Tracing/Operational.

    ReplyDelete
  2. http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html

    ReplyDelete

Related Posts Plugin for WordPress, Blogger...