Fix the Event Log service error ‘Access Denied’ after a restore of a Windows Server 2008 server
Wed-2009-11-25 Leave a comment
After preforming a disaster recovery of a Windows Server 2008 server, the Event Log service wouldn’t start. Manually trying to start it resulted in an Access Denied error.
A very helpful post in the Technet Forums, pointed me in the right direction: The correct permission on the event logs folder was missing.
Executing the following command fixed my problem:
ICACLS C:\Windows\System32\winevt\logs /grant *S-1-5-80-880578595-1860270145-482643319-2788375705-1540778122:(F)
This gives the EventLog group full permission on the folder C:\Windows\System32\winevt\logs.