Guest John Skandar Posted September 24, 2008 Posted September 24, 2008 Hello, I have a client application that can log operations done by users onto the event viewer of the server, in the "Applications" section. I've found that the application can do this only if the local user is also an admin on the server. Of course, we can't give users administrative rights on the server. So, is there a way to grant a remote user the right to write on the event viewer without being administrator? Thanks
Guest Masterplan Posted September 24, 2008 Posted September 24, 2008 RE: Remotely writing on event viewer Hi John, This link will show you how to do it: http://searchwindevelopment.techtarget.com/tip/0,289483,sid8_gci887779,00.html -- Have a nice day! http://winmasterplan.blogspot.com "John Skandar" wrote: > Hello, > I have a client application that can log operations done by users onto the > event viewer of the server, in the "Applications" section. > I've found that the application can do this only if the local user is also > an admin on the server. Of course, we can't give users administrative rights > on the server. So, is there a way to grant a remote user the right to write > on the event viewer without being administrator? > > Thanks
Guest John Skandar Posted September 24, 2008 Posted September 24, 2008 RE: Remotely writing on event viewer I think the solution in the link can work for a local user of the server (in that case the ASP.NET user), but in my case it is the application on the clients that writes directly to the server event viewer. Even if I set the user permission on the regedit, how can the remote user have access to that part of the server registry without being admin? "Masterplan" wrote: > Hi John, > > This link will show you how to do it: > http://searchwindevelopment.techtarget.com/tip/0,289483,sid8_gci887779,00.html > > -- > Have a nice day! > > http://winmasterplan.blogspot.com > > > "John Skandar" wrote: > > > Hello, > > I have a client application that can log operations done by users onto the > > event viewer of the server, in the "Applications" section. > > I've found that the application can do this only if the local user is also > > an admin on the server. Of course, we can't give users administrative rights > > on the server. So, is there a way to grant a remote user the right to write > > on the event viewer without being administrator? > > > > Thanks
Guest Masterplan Posted September 24, 2008 Posted September 24, 2008 RE: Remotely writing on event viewer Hi again, If you give write access to a user to a specific key in the registry, that user will have the right to write in the registry in that location without being an admin. -- Have a nice day! http://winmasterplan.blogspot.com "John Skandar" wrote: > I think the solution in the link can work for a local user of the server (in > that case the ASP.NET user), but in my case it is the application on the > clients that writes directly to the server event viewer. Even if I set the > user permission on the regedit, how can the remote user have access to that > part of the server registry without being admin? > > "Masterplan" wrote: > > > Hi John, > > > > This link will show you how to do it: > > http://searchwindevelopment.techtarget.com/tip/0,289483,sid8_gci887779,00.html > > > > -- > > Have a nice day! > > > > http://winmasterplan.blogspot.com > > > > > > "John Skandar" wrote: > > > > > Hello, > > > I have a client application that can log operations done by users onto the > > > event viewer of the server, in the "Applications" section. > > > I've found that the application can do this only if the local user is also > > > an admin on the server. Of course, we can't give users administrative rights > > > on the server. So, is there a way to grant a remote user the right to write > > > on the event viewer without being administrator? > > > > > > Thanks
Guest John Skandar Posted September 24, 2008 Posted September 24, 2008 RE: Remotely writing on event viewer > > If you give write access to a user to a specific key in the registry, that > user will have the right to write in the registry in that location without > being an admin. > Also if the user is a remote user? More precisely, not a user connected via remote desktop, but a user that runs an application that needs to write on the registry of another computer. As far as I know, writing remotely on registry or event viewer works using the administrative shares, that are accessible only with admin privileges.
Guest Masterplan Posted September 25, 2008 Posted September 25, 2008 RE: Remotely writing on event viewer I see...In this case it depends on which way that application access the remote system (by using a specific user account or in another way). -- Have a nice day! http://winmasterplan.blogspot.com "John Skandar" wrote: > > > > > If you give write access to a user to a specific key in the registry, that > > user will have the right to write in the registry in that location without > > being an admin. > > > > Also if the user is a remote user? More precisely, not a user connected via > remote desktop, but a user that runs an application that needs to write on > the registry of another computer. As far as I know, writing remotely on > registry or event viewer works using the administrative shares, that are > accessible only with admin privileges.
Guest John Skandar Posted September 25, 2008 Posted September 25, 2008 RE: Remotely writing on event viewer It uses the user account that is logged on the client PC. If I log in on the client with the same domain account that is admin on the server, the application logs the events on the server without problems. With normal user accounts it doesn't work, even if I set the registry permissions on the server... "Masterplan" wrote: > I see...In this case it depends on which way that application access the > remote system (by using a specific user account or in another way). > > -- > Have a nice day! > > http://winmasterplan.blogspot.com > > > "John Skandar" wrote: > > > > > > > > > If you give write access to a user to a specific key in the registry, that > > > user will have the right to write in the registry in that location without > > > being an admin. > > > > > > > Also if the user is a remote user? More precisely, not a user connected via > > remote desktop, but a user that runs an application that needs to write on > > the registry of another computer. As far as I know, writing remotely on > > registry or event viewer works using the administrative shares, that are > > accessible only with admin privileges.
Recommended Posts