Remotely writing on event viewer

  • Thread starter Thread starter John Skandar
  • Start date Start date
J

John Skandar

Guest
Hello,
I have a client application that can log operations done by users onto the
event viewer of the server, in the "Applications" section.
I've found that the application can do this only if the local user is also
an admin on the server. Of course, we can't give users administrative rights
on the server. So, is there a way to grant a remote user the right to write
on the event viewer without being administrator?

Thanks
 
RE: Remotely writing on event viewer

Hi John,

This link will show you how to do it:
http://searchwindevelopment.techtarget.com/tip/0,289483,sid8_gci887779,00.html

--
Have a nice day!

http://winmasterplan.blogspot.com


"John Skandar" wrote:

> Hello,
> I have a client application that can log operations done by users onto the
> event viewer of the server, in the "Applications" section.
> I've found that the application can do this only if the local user is also
> an admin on the server. Of course, we can't give users administrative rights
> on the server. So, is there a way to grant a remote user the right to write
> on the event viewer without being administrator?
>
> Thanks
 
RE: Remotely writing on event viewer

I think the solution in the link can work for a local user of the server (in
that case the ASP.NET user), but in my case it is the application on the
clients that writes directly to the server event viewer. Even if I set the
user permission on the regedit, how can the remote user have access to that
part of the server registry without being admin?

"Masterplan" wrote:

> Hi John,
>
> This link will show you how to do it:
> http://searchwindevelopment.techtarget.com/tip/0,289483,sid8_gci887779,00.html
>
> --
> Have a nice day!
>
> http://winmasterplan.blogspot.com
>
>
> "John Skandar" wrote:
>
> > Hello,
> > I have a client application that can log operations done by users onto the
> > event viewer of the server, in the "Applications" section.
> > I've found that the application can do this only if the local user is also
> > an admin on the server. Of course, we can't give users administrative rights
> > on the server. So, is there a way to grant a remote user the right to write
> > on the event viewer without being administrator?
> >
> > Thanks
 
RE: Remotely writing on event viewer

Hi again,

If you give write access to a user to a specific key in the registry, that
user will have the right to write in the registry in that location without
being an admin.

--
Have a nice day!

http://winmasterplan.blogspot.com


"John Skandar" wrote:

> I think the solution in the link can work for a local user of the server (in
> that case the ASP.NET user), but in my case it is the application on the
> clients that writes directly to the server event viewer. Even if I set the
> user permission on the regedit, how can the remote user have access to that
> part of the server registry without being admin?
>
> "Masterplan" wrote:
>
> > Hi John,
> >
> > This link will show you how to do it:
> > http://searchwindevelopment.techtarget.com/tip/0,289483,sid8_gci887779,00.html
> >
> > --
> > Have a nice day!
> >
> > http://winmasterplan.blogspot.com
> >
> >
> > "John Skandar" wrote:
> >
> > > Hello,
> > > I have a client application that can log operations done by users onto the
> > > event viewer of the server, in the "Applications" section.
> > > I've found that the application can do this only if the local user is also
> > > an admin on the server. Of course, we can't give users administrative rights
> > > on the server. So, is there a way to grant a remote user the right to write
> > > on the event viewer without being administrator?
> > >
> > > Thanks
 
RE: Remotely writing on event viewer


>
> If you give write access to a user to a specific key in the registry, that
> user will have the right to write in the registry in that location without
> being an admin.
>

Also if the user is a remote user? More precisely, not a user connected via
remote desktop, but a user that runs an application that needs to write on
the registry of another computer. As far as I know, writing remotely on
registry or event viewer works using the administrative shares, that are
accessible only with admin privileges.
 
RE: Remotely writing on event viewer

I see...In this case it depends on which way that application access the
remote system (by using a specific user account or in another way).

--
Have a nice day!

http://winmasterplan.blogspot.com


"John Skandar" wrote:

>
> >
> > If you give write access to a user to a specific key in the registry, that
> > user will have the right to write in the registry in that location without
> > being an admin.
> >
>
> Also if the user is a remote user? More precisely, not a user connected via
> remote desktop, but a user that runs an application that needs to write on
> the registry of another computer. As far as I know, writing remotely on
> registry or event viewer works using the administrative shares, that are
> accessible only with admin privileges.
 
RE: Remotely writing on event viewer

It uses the user account that is logged on the client PC.
If I log in on the client with the same domain account that is admin on the
server, the application logs the events on the server without problems.
With normal user accounts it doesn't work, even if I set the registry
permissions on the server...

"Masterplan" wrote:

> I see...In this case it depends on which way that application access the
> remote system (by using a specific user account or in another way).
>
> --
> Have a nice day!
>
> http://winmasterplan.blogspot.com
>
>
> "John Skandar" wrote:
>
> >
> > >
> > > If you give write access to a user to a specific key in the registry, that
> > > user will have the right to write in the registry in that location without
> > > being an admin.
> > >
> >
> > Also if the user is a remote user? More precisely, not a user connected via
> > remote desktop, but a user that runs an application that needs to write on
> > the registry of another computer. As far as I know, writing remotely on
> > registry or event viewer works using the administrative shares, that are
> > accessible only with admin privileges.
 
Back
Top