Viewing event logs in a remote domain

August 09th, 2005 - 06:51 am ET by SuperPlay | Report spam
We currently have a single PC in a workgroup that we use as one of our
administrative workstations where we administrate multiple domains from.

The problem we're having is with Event Viewer within mmc. Ideally we'd like
to be able to view remote domain server's event logs from this workgroup
station, but whenever we try we get an "Unable to connect to the computer
<servername>" message.

We've also tried creating a custom mmc and using "Run As..." but then we get
the
message "Logon fialure: unknown user name or bad password." even though the
credentials are correct.

Is there some way (or somewhere) we can get the remote domain to recognize
the workgroup station as having administrative priviledges over the event
logs without adding the station to the domain?
email Follow the discussionReplies 5 repliesReplies Make a reply

Similar topics

Replies

#1 Dave Shaw [MVP]
August 09th, 2005 - 07:17 am ET | Report spam
Are you able to login to the remote domain in question with an account from
that domain, on that workstation?

-ds


"SuperPlay" wrote in message
news:
We currently have a single PC in a workgroup that we use as one of our
administrative workstations where we administrate multiple domains from.

The problem we're having is with Event Viewer within mmc. Ideally we'd
like
to be able to view remote domain server's event logs from this workgroup
station, but whenever we try we get an "Unable to connect to the computer
<servername>" message.

We've also tried creating a custom mmc and using "Run As..." but then we
get
the
message "Logon fialure: unknown user name or bad password." even though
the
credentials are correct.

Is there some way (or somewhere) we can get the remote domain to recognize
the workgroup station as having administrative priviledges over the event
logs without adding the station to the domain?




Replies Reply to this message
#2 SuperPlay
August 09th, 2005 - 07:39 am ET | Report spam
Yes.

If we go "\\servername\share" or "\\servername\c$" (for example) we can
connect to the domain if we provide a valid domain username and password.



"Dave Shaw [MVP]" wrote:

Are you able to login to the remote domain in question with an account from
that domain, on that workstation?

-ds


"SuperPlay" wrote in message
news:
> We currently have a single PC in a workgroup that we use as one of our
> administrative workstations where we administrate multiple domains from.
>
> The problem we're having is with Event Viewer within mmc. Ideally we'd
> like
> to be able to view remote domain server's event logs from this workgroup
> station, but whenever we try we get an "Unable to connect to the computer
> <servername>" message.
>
> We've also tried creating a custom mmc and using "Run As..." but then we
> get
> the
> message "Logon fialure: unknown user name or bad password." even though
> the
> credentials are correct.
>
> Is there some way (or somewhere) we can get the remote domain to recognize
> the workgroup station as having administrative priviledges over the event
> logs without adding the station to the domain?
>
>





Replies Reply to this message
#3 Paul Bergson
August 09th, 2005 - 08:38 am ET | Report spam
Try mapping a drive to the remote machine, once mapped try your connection
via mmc. Although ugly, I have gotten this exact scenario to work this way.



Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"SuperPlay" wrote in message
news:
We currently have a single PC in a workgroup that we use as one of our
administrative workstations where we administrate multiple domains from.

The problem we're having is with Event Viewer within mmc. Ideally we'd
like
to be able to view remote domain server's event logs from this workgroup
station, but whenever we try we get an "Unable to connect to the computer
<servername>" message.

We've also tried creating a custom mmc and using "Run As..." but then we
get
the
message "Logon fialure: unknown user name or bad password." even though
the
credentials are correct.

Is there some way (or somewhere) we can get the remote domain to recognize
the workgroup station as having administrative priviledges over the event
logs without adding the station to the domain?




Replies Reply to this message
#4 Wayne Tilton
August 09th, 2005 - 12:59 pm ET | Report spam
news::

Yes.

If we go "\\servername\share" or "\\servername\c$" (for example) we
can connect to the domain if we provide a valid domain username and
password.



"Dave Shaw [MVP]" wrote:

Are you able to login to the remote domain in question with an
account from that domain, on that workstation?

-ds


"SuperPlay" wrote in message
news:
> We currently have a single PC in a workgroup that we use as one of
> our administrative workstations where we administrate multiple
> domains from.
>
> The problem we're having is with Event Viewer within mmc. Ideally
> we'd like
> to be able to view remote domain server's event logs from this
> workgroup station, but whenever we try we get an "Unable to connect
> to the computer <servername>" message.
>
> We've also tried creating a custom mmc and using "Run As..." but
> then we get
> the
> message "Logon fialure: unknown user name or bad password." even
> though the
> credentials are correct.
>
> Is there some way (or somewhere) we can get the remote domain to
> recognize the workgroup station as having administrative
> priviledges over the event logs without adding the station to the
> domain?
>
>








Create a shortcut like this:

runas /netonly /user:domain\userid "mmc dsa.msc"

HTH,

Wayne Tilton
Replies Reply to this message
#5 kemics
August 09th, 2005 - 02:05 pm ET | Report spam
ok, here is how I had to do it... Create a BLANK MMC on your current box.
Save it to the desktop. Create a user on that same machine with the same
username, password as the one in your workgroup, give it the same CREDENTIALS
that the user who created the BLANK MMC has...

Give the new user full control to the MMC.

Select the MMC, Right click and do "Run-As" Type in the credentials of the
user that you just created.

When the MMC runs add the Computer Management for the server which you want
to check the event logs for. You should be able to view them now. Save it,
you will have to do RUN-AS each time you want to open this now though, but it
works...

Let me know if you have problems.


"Paul Bergson" wrote:

Try mapping a drive to the remote machine, once mapped try your connection
via mmc. Although ugly, I have gotten this exact scenario to work this way.



Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"SuperPlay" wrote in message
news:
> We currently have a single PC in a workgroup that we use as one of our
> administrative workstations where we administrate multiple domains from.
>
> The problem we're having is with Event Viewer within mmc. Ideally we'd
> like
> to be able to view remote domain server's event logs from this workgroup
> station, but whenever we try we get an "Unable to connect to the computer
> <servername>" message.
>
> We've also tried creating a custom mmc and using "Run As..." but then we
> get
> the
> message "Logon fialure: unknown user name or bad password." even though
> the
> credentials are correct.
>
> Is there some way (or somewhere) we can get the remote domain to recognize
> the workgroup station as having administrative priviledges over the event
> logs without adding the station to the domain?
>
>





email Follow the discussion Replies Reply to this message
Help Create a new topicReplies Make a reply
Search Make your own search