Remote Server Event Log Access 'Access Denied'

  • Article

Problem
=======
Remote Server Event Log Access 'Access Denied'

clip_image002

Cause
======
- Opened Regedit at Workstation and checked the following settings:

=============================================================

HKLM\SYSTEM\CurrentControlSet\CONTROL\SecurePipeServes\winreg

Ensure LocalService has read permission

clip_image004

Solution
======
To resolve this issue, use Registry Editor to grant Read Only permissions to the Local Service user account. To do this, follow these steps:

  1. Click Start, click Run, type regedit, and then click OK.
  2. Expand the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ SecurePipeServers

  1. Right-click winreg, and then click Permissions.
  2. Click Add.
  3. In the Enter the object names to select box, type Local Service, and then click OK.
    Alternatively, you can type the name of a user or group that you want to grant access permission.
  4. In the Permissions for LOCAL SERVICE list, next to Read, click to select the Allow check box.
  5. Quit Registry Editor, and then restart your computer.