Is Windows 7 still assigning event log permissions through the registry?

A very simple question, to which I had problems with an answer.

In Windows XP and Server 2003, I sometimes encounter a problem when trying to write to the event log.

"The source was not found, but some or all of the event logs could not be found. Inaccessible logs: Security.

The solution that previously worked in XP and Server 2003 was to provide the correct user or Read or Full Control access rights to the registry key for the group of abusive event logs. For instance:

  • HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ EventLog \ or
  • HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ EventLog \ Security

It always worked. But I came across Windows 7, with which I am still very inexperienced.

I vaguely know that Windows 7 and Vista are doing interesting things to try to downgrade registry, virtualization, etc. This gives me a little question about whether Windows 7 still maintains event log security.

I did a few searches on this topic, but I could not find the answer to what (I thought) would be a very simple question.

Any help pointing me in the right direction would be great.

+3
source share
2 answers

, , , , (, ). Windows 7 Windows Server 2008 R2 .

0

.

. , .

, . , , Windows .

, . , .

- . "" .

, .

+1

Source: https://habr.com/ru/post/1733805/


All Articles