Windows Event Viewer

[aviationjames]

Hi, I have successfully connected a computer remotely on RDP on a different network. I would now like to use remote Event Viewer, however I can connect but it will not download the logs, here is a screenshot, please help

 

 

[Guest]

You must be a member of the local Administrators group in order to access the Event Viewer from what I recall. Are you?

[aviationjames]

You must be a member of the local Administrators group in order to access the Event Viewer from what I recall. Are you?

I have done this Change NTFS permission of  %WINDIR%\System32\WinEvt\Logs directory, add Local Service andNetwork Service, give them FULL permissions.

[Guest]

Why don't you just add your username to the local administrators group ? No need to modify the directory itself.

 

Also, make sure you run the Event Viewer in Elevated Privileges. UAC can sometimes be a bitch.

[aviationjames]

Why don't you just add your username to the local administrators group ? No need to modify the directory itself.

 

Also, make sure you run the Event Viewer in Elevated Privileges. UAC can sometimes be a bitch.

How do I add my IP to this group? When I connect, I take his WAN IP and type in his email and password, and then it connects, but I get access denied 

[Guest]

It is not about the IP, but about the username. If you type his email and password when trying to log into the computer, then that email must be part of the local administrators group of that computer. But you must be a local administrator in order to add a user to the administrators group. It is in Computer Management -> System Tools -> Local Users and Groups -> Groups

[aviationjames]

It is not about the IP, but about the username. If you type his email and password when trying to log into the computer, then that email must be part of the local administrators group of that computer. But you must be a local administrator in order to add a user to the administrators group. It is in Computer Management -> System Tools -> Local Users and Groups -> Groups

I have done this, but don't know what to add. Please see below

 

I am trying to add my user, which is my email address

[Guest]

Go into the Users and find the correct local user and use this one. I noticed that you are running Windows 8.1 and login in with an Hotmail account. I usually always login with a local account and not a Microsoft services account, so I don't know how to add a Microsoft services account to the admins group if the procedure I mentioned does not work. You'll have to dig that part.

[aviationjames]

Go into the Users and find the correct local user and use this one. I noticed that you are running Windows 8.1 and login in with an Hotmail account. I usually always login with a local account and not a Microsoft services account, so I don't know how to add a Microsoft services account to the admins group if the procedure I mentioned does not work. You'll have to dig that part.

There is no local user on his PC, or mine. Is there any other way I can get access?

[omniomi]

If you're using event viewer to "connect to another computer" you need to check the "Connect as another user" check box, click "set user," and specify a username and password that exists on the remote computer and has admin access.

 

 

If you're connecting by RDP like you said though stop using the tools from your own start menu and use them on the remote machine. If you can RDP using his credentials they're likely admin credentials so you should be able to open the event viewer from the remote desktop:

 

1. Start

2. Remote Desktop Connection

3. Enter the IP

4. Identify with credentials for the remote machine.

5. Inside the RDP window open Event Viewer.

 

and DO NOT change folder permissions inside %WINDIR%\System32.