"Access Denied" Error Message When You Try to Open the System Log or the Application Log (329848)



The information in this article applies to:

  • Microsoft Windows 2000

This article was previously published under Q329848

SYMPTOMS

When you try to open the System Event log or the Application Event log, you receive an "
access denied
" error message.

CAUSE

This issue may occur if you log on to the network as a user who does not have the correct permissions to view these items.

This issue may also occur if you log on to the network as a user who has the correct permissions to view these items but is member of a group that does not have the correct permissions.

RESOLUTION

To resolve this issue, use one of the following methods.

Method 1: Log On to the Network as a User Who Has the Correct Permissions

Log on to the network as Administrator, or log on to the network as a user who is a member of the Administrators group.

Method 2: Remove the User from Unnecessary Groups

If you are logged on to the network as Administrator, but you are a member of a group such as Guests, you do not have the correct permissions. Use the net user command to determine group memberships, and then remove the user from any unnecessary groups. To do so, follow these steps:

Step 1: Use the Net User Command to Check Group Membership

  1. Click Start, click Run, type cmd, and then click OK.
  2. At the command prompt, type net user user_name, and then press ENTER.
  3. Note any groups that do not have the correct permissions.

Step 2: Use Active Directory Users and Computers to Remove the User from a Group

  1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. ExpandBuiltIn, and then expand Users to locate the group from which you want to remove the user.
  3. Double-click the group from which you want to remove the user.
  4. Click the Members tab, click the user whom you want to remove from the group, and then click Remove.

Method 3: Create a New User

Create a new user, and then add the user to only the Administrators group. To do so, follow these steps:
  1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. Right-click Users, and then click New User.
  3. Type the correct information to create the user.
  4. Right-click the new user, and then click Add users to groups.
  5. In the list of groups, click Administrators, and then click OK.
  6. Log off, and then log on to the network as the new user.

Modification Type:MinorLast Reviewed:4/29/2003
Keywords:kberrmsg kbprb KB329848