‎2012-03-02
03:19 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Windows agentless log collection
Hi, I am trying to integrate the windows 2008 R2 server with RSA for log collection. I made the configurations on the server and created a service account with admin access to poll logs. But am getting access is denied error when tried to connect through runeventviewer.exe. I am able to ping the server from RSA collector and telnet using the ports 135,139 and 445. What could be the issue for access denied error as service account user is part of domain admins.
2 Replies
‎2012-03-20
09:10 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
If you haven't already I would contact RSA Support and have them help you troubleshoot the issue. Nathan
‎2012-07-06
07:57 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Try to use this:
cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f
I had some problem with local account and enabled UAC.
cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f
I had some problem with local account and enabled UAC.
