yes that really rocks - kiwisyslog is what you can use with ntsyslog for sending the logging info - all can be on windows and there is a free version that you can download and evulate
ntsyslog http://projects.sf.net/ntsyslog
kiwisyslog http://kiwisyslog.com
-aditya
-----Original Message-----
From: Laura Robinson [mailto:laurarobinson (at) earthlink (dot) net [email concealed]]
Sent: Thursday, January 08, 2004 4:17 AM
To: dwr3ck (at) hushmail (dot) com [email concealed]; focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Re: Accessing eventlogs remotely on W2K3 Server
We addressed this by configuring all of our event logs to log to a remote (Unix) syslog server. Might this be an option for you?
Laura
-----Original Message-----
From: dwr3ck (at) hushmail (dot) com [email concealed]
Sent: Dec 30, 2003 10:50 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Accessing eventlogs remotely on W2K3 Server
In shared web environments it is necessary to enable application owners
to view the event logs on the IIS servers hosting their applications
(minus the security log).
This is easy to do in W2K server by having them use the run as command
with the event viewer MMC from their machines with an account that has
user privileges on the server (that DOES NOT have log on locally access
etc).
I have found one reference on the MS web site that indicates that you
must be a local admin on the server to view event logs remotely.
Has anyone else run into this? I need to provide real-time access but
I cannot give the application owners local admin accounts. Also, enabling
guest access to the logs is not an option.
Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2
Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434
Promote security and make money with the Hushmail Affiliate Program:
https://www.hushmail.com/about.php?subloc=affiliate&l=427
ntsyslog http://projects.sf.net/ntsyslog
kiwisyslog http://kiwisyslog.com
-aditya
-----Original Message-----
From: Laura Robinson [mailto:laurarobinson (at) earthlink (dot) net [email concealed]]
Sent: Thursday, January 08, 2004 4:17 AM
To: dwr3ck (at) hushmail (dot) com [email concealed]; focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Re: Accessing eventlogs remotely on W2K3 Server
We addressed this by configuring all of our event logs to log to a remote (Unix) syslog server. Might this be an option for you?
Laura
-----Original Message-----
From: dwr3ck (at) hushmail (dot) com [email concealed]
Sent: Dec 30, 2003 10:50 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Accessing eventlogs remotely on W2K3 Server
In shared web environments it is necessary to enable application owners
to view the event logs on the IIS servers hosting their applications
(minus the security log).
This is easy to do in W2K server by having them use the run as command
with the event viewer MMC from their machines with an account that has
user privileges on the server (that DOES NOT have log on locally access
etc).
I have found one reference on the MS web site that indicates that you
must be a local admin on the server to view event logs remotely.
Has anyone else run into this? I need to provide real-time access but
I cannot give the application owners local admin accounts. Also, enabling
guest access to the logs is not an option.
Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2
Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434
Promote security and make money with the Hushmail Affiliate Program:
https://www.hushmail.com/about.php?subloc=affiliate&l=427
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
[ reply ]