Evebntcombmt Tool

[John]

Hi

We're looking to give our service desk acess to the Eventcomb tool to be
able to determine where an account is being locked out but currently when
they execute to look for locked accounts it comes up with an GetLastError was
5 Error text was Access Denied, the assumption here is there accounts do not
have enough permissions to be able to run the tool. What modifications might
be made to enable them to have the ability to run the tool.

Thanks
--
John

 

[S. Pidgorny]

Read security log on the PDC emulator. I believe that's NTFS pemissions on
SecEvent.evt.


--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *


"John" <John@discussions.microsoft.com> wrote in message
news:657D17E8-EE11-4341-8236-C11D4B1C6679@microsoft.com...
> Hi
>
> We're looking to give our service desk acess to the Eventcomb tool to be
> able to determine where an account is being locked out but currently when
> they execute to look for locked accounts it comes up with an GetLastError
> was
> 5 Error text was Access Denied, the assumption here is there accounts do
> not
> have enough permissions to be able to run the tool. What modifications
> might
> be made to enable them to have the ability to run the tool.
>
> Thanks
> --
> John