1. Click Start -> Run and type: regedit
2. Click Ok
3. Locate: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ Eventlog\Application
4. Modify CustomSD to give all users read/write access to the Application event log by appending the string (A;;0x3;;;AU) to the CustomSD entry.

For example

O:BAG:SYD:(D;;0xf0007;;;AN)(D;;0xf0007;;;BG)(A;;0xf0007;;;SY)(A;;0×7;;;BA) (A;;0×7;;;SO)(A;;0×3;;;IU)(A;;0×3;;;SU)(A;;0×3;;;S-1-5-3)(A;;0x3;;;AU)

The completed blog is http://mossipqueen.wordpress.com/2008/08/04/cannot-open-log-for-source-you-may-not-have-write-access/

Advertisements