Cannot View Correct Event Details with Non-Administrative Rights
PSS ID Number: 129549
Article Last Modified on 12/15/2003
The information in this article applies to:
- Microsoft Windows NT Server 3.5
- Microsoft Windows NT Workstation 3.1
- Microsoft Windows NT Workstation 3.5
- Microsoft Windows NT Advanced Server 3.1
- Microsoft Windows for Workgroups 3.11
This article was previously published under Q129549
SYMPTOMS
You can use the Windows NT Server Tools Event Viewer under Windows
3.1 or Windows for Workgroups 3.11 to view security events of a remote
Windows NT computer. If you don't have administrative rights and you
attempt to view the security log in Event Viewer, the following description
appears for each event:
The description for Event ID (<xxx>) in Source (Security) could not be
found. It contains the following insertion string(s): <Strings vary for
each Event ID number>.
where <xxx> is a specific Event ID number.
NOTE: This problem occurs even though the user in Windows 3.1 or
Windows for Workgroups 3.11 has the "Manage auditing and security
log" user rights.
WORKAROUND
To work around this problem, grant the Windows 3.1 or Windows for
Workgroups 3.11 user administrative rights.
STATUS
Microsoft has confirmed this to be a problem in Windows NT version 3.5.
We are researching this problem and will post new information here in
the Microsoft Knowledge Base as it becomes available.
Additional query words: prodnt 3.10 3.11 win3x wfw wfwg
Keywords: KB129549
Technology: kbAudDeveloper kbWFW311 kbWFWSearch kbWinNT310Search kbWinNT350search kbWinNTAdvSerSearch kbWinNTAdvServ310 kbWinNTS350 kbWinNTS350search kbWinNTsearch kbWinNTSsearch kbWinNTW310 kbWinNTW310Search kbWinNTW350 kbWinNTW350search kbWinNTWsearch