A
Adino749
Unable to get Microsoft-Windows-PrintService/Operational logs, keep getting 'Access is denied (5)' despite having permissions as a member if the 'administrators' group. I can get the Microsoft-Windows-PrintService/Admin logs. I added the reg key Microsoft-Windows-PrintService/Operational and initially was able to see Ops log but next day got the access deny error. I don't see an option to enable Microsoft-Windows-PrintService/Operational in Server Manager>Print Services. Ran 'wevtutil 'commands but same deny error. Ran PS scripts to enable logs and even though shows enabled still access deny. Appears this was a known issue as of late 2018 but never saw any resolution. Any help appreciated, thanks.
***attaching t/s steps***
C:\Windows\System32\winevt>wevtutil gl
Required argument(s) is/are not specified. The parameter is incorrect.
C:\Windows\System32\winevt>wevtutil gl Microsoft-Windows-PrintService/Operational
name: Microsoft-Windows-PrintService/Operational
enabled: true
type: Operational
owningPublisher: Microsoft-Windows-PrintService
isolation: Application
channelAccess: O:BAG:SYDA;;0x2;;;S-1-15-2-1)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)
logging:
logFileName: L:\Printer logs
retention: true
autoBackup: false
maxSize: 1052704768
publishing:
fileMax: 1
C:\Windows\System32\winevt>wevtutil gli Microsoft-Windows-PrintService/Operational
Failed to read log status information for log Microsoft-Windows-PrintService/Operational. Access is denied.
C:\Windows\System32\winevt>wevtutil qe Microsoft-Windows-PrintService/Operational
Failed to open event query. Access is denied.
C:\Windows\System32\winevt>wevtutil epl Microsoft-Windows-PrintService/Operational
Required argument(s) is/are not specified. The parameter is incorrect.
C:\Windows\System32\winevt>wevtutil gl Microsoft-Windows-PrintService/Operational
name: Microsoft-Windows-PrintService/Operational
enabled: true
type: Operational
owningPublisher: Microsoft-Windows-PrintService
isolation: Application
channelAccess: O:BAG:SYDA;;0x2;;;S-1-15-2-1)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)
logging:
logFileName: L:\Printer logs
retention: true
autoBackup: false
maxSize: 1052704768
publishing:
fileMax: 1
C:\Windows\System32>wevtutil epl Microsoft-Windows-PrintService/Operational
Required argument(s) is/are not specified. The parameter is incorrect.
C:\Windows\System32>wevtutil qe Microsoft-Windows-PrintService/Operational
Failed to open event query. Access is denied.
C:\Windows\System32>wevtutil gl Microsoft-Windows-PrintService/Operational
name: Microsoft-Windows-PrintService/Operational
enabled: true
type: Operational
owningPublisher: Microsoft-Windows-PrintService
isolation: Application
channelAccess: O:BAG:SYDA;;0x2;;;S-1-15-2-1)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)
logging:
logFileName: L:\Printer logs
retention: true
autoBackup: false
maxSize: 1052704768
publishing:
fileMax: 1
C:\Windows\System32>wevtutil gli Microsoft-Windows-PrintService/Operational
Failed to read log status information for log Microsoft-Windows-PrintService/Operational. Access is denied.
C:\Windows\System32>
C:\Windows\System32>wevtutil sl Microsoft-Windows-PrintService/Operational /e:true
The channel fails to activate.
Failed to save configuration or activate log Microsoft-Windows-PrintService/Operational. Access is denied.
C:\Windows\System32>
Continue reading...
***attaching t/s steps***
C:\Windows\System32\winevt>wevtutil gl
Required argument(s) is/are not specified. The parameter is incorrect.
C:\Windows\System32\winevt>wevtutil gl Microsoft-Windows-PrintService/Operational
name: Microsoft-Windows-PrintService/Operational
enabled: true
type: Operational
owningPublisher: Microsoft-Windows-PrintService
isolation: Application
channelAccess: O:BAG:SYDA;;0x2;;;S-1-15-2-1)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)
logging:
logFileName: L:\Printer logs
retention: true
autoBackup: false
maxSize: 1052704768
publishing:
fileMax: 1
C:\Windows\System32\winevt>wevtutil gli Microsoft-Windows-PrintService/Operational
Failed to read log status information for log Microsoft-Windows-PrintService/Operational. Access is denied.
C:\Windows\System32\winevt>wevtutil qe Microsoft-Windows-PrintService/Operational
Failed to open event query. Access is denied.
C:\Windows\System32\winevt>wevtutil epl Microsoft-Windows-PrintService/Operational
Required argument(s) is/are not specified. The parameter is incorrect.
C:\Windows\System32\winevt>wevtutil gl Microsoft-Windows-PrintService/Operational
name: Microsoft-Windows-PrintService/Operational
enabled: true
type: Operational
owningPublisher: Microsoft-Windows-PrintService
isolation: Application
channelAccess: O:BAG:SYDA;;0x2;;;S-1-15-2-1)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)
logging:
logFileName: L:\Printer logs
retention: true
autoBackup: false
maxSize: 1052704768
publishing:
fileMax: 1
C:\Windows\System32>wevtutil epl Microsoft-Windows-PrintService/Operational
Required argument(s) is/are not specified. The parameter is incorrect.
C:\Windows\System32>wevtutil qe Microsoft-Windows-PrintService/Operational
Failed to open event query. Access is denied.
C:\Windows\System32>wevtutil gl Microsoft-Windows-PrintService/Operational
name: Microsoft-Windows-PrintService/Operational
enabled: true
type: Operational
owningPublisher: Microsoft-Windows-PrintService
isolation: Application
channelAccess: O:BAG:SYDA;;0x2;;;S-1-15-2-1)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)
logging:
logFileName: L:\Printer logs
retention: true
autoBackup: false
maxSize: 1052704768
publishing:
fileMax: 1
C:\Windows\System32>wevtutil gli Microsoft-Windows-PrintService/Operational
Failed to read log status information for log Microsoft-Windows-PrintService/Operational. Access is denied.
C:\Windows\System32>
C:\Windows\System32>wevtutil sl Microsoft-Windows-PrintService/Operational /e:true
The channel fails to activate.
Failed to save configuration or activate log Microsoft-Windows-PrintService/Operational. Access is denied.
C:\Windows\System32>
Continue reading...