Security Event Log Backup via script
There is a script which will backup the security event log and then clear it up as well with me. It is working fine when am on the administrator account but if I use the same script in a standard user account then it wont successfully run and this the problem that I am having with it. I have already assigned the following rights to my test user for Managing the Auditing and Security Rights, then Impersonate a client after authentication and also Backup file and directories as well, but that wont work. With the same test user the security evet log in the event viewer can ve viewed but cannot be saved and an error message is shown that says "A required privilege is not held by the client".
RE: Security Event Log Backup via script
I have solved this issue, it was some permissions issue that the user needs to have which can be done by below method:
- First of all go to member of backup operators group
- After that you need to go to Manage Auditing and Security log via policy
- Here the user must have Full permissions to the key that governs the Security Log: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security
- Thats it