All other Computer Explorer tabs show information but the 'ConfigMgr - Client Logs' tab display no information, no matter which log file is selected e.g. Execmgr.log
All Computers show same issue.
Thanks.
All of the ConfigMgr Client Logs are found in %windir%\System32\CCM\Logs. If the only functionality not working in the Computer Explorer is the ability to retrieve those logfiles, I would suspect that perhaps the ACLs on that folder have been modified -- perhaps in response to "locking down" the ACLs on the %windir% folder.
SYSTEM and Administrators should have Full Control on that entire folder tree, but the more likely cause is that the local USERS group no longer has READ access to the Logs folder.
Hi Lawrence,
Security has not been modified, and is as standard:
C:\Windows\System32>icacls ccm
ccm NT AUTHORITY\SYSTEM:(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
BUILTIN\Administrators:(F)
BUILTIN\Administrators:(OI)(CI)(IO)(F)
NT AUTHORITY\INTERACTIVE:(CI)(RX)
NT AUTHORITY\LOCAL SERVICE:(CI)(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\System32>icacls ccm\logs
ccm\logs BUILTIN\Users:(OI)(CI)(R)
NT AUTHORITY\INTERACTIVE:(OI)(IO)(R,D,WD,AD)
NT AUTHORITY\LOCAL SERVICE:(OI)(IO)(R,D,WD,AD)
NT AUTHORITY\NETWORK SERVICE:(OI)(IO)(R,D,WD,AD)
NT AUTHORITY\INTERACTIVE:(CI)(S,RD,WD,X)
NT AUTHORITY\LOCAL SERVICE:(CI)(S,RD,WD,X)
NT AUTHORITY\NETWORK SERVICE:(CI)(S,RD,WD,X)
OWNER RIGHTS:(OI)(CI)(IO)
NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
SCCM right-click tools and direct folder access via Admin shares allow access OK...
The ConfigMgr - Cache tab does display data OK, and its security is as follows:
C:\Windows\System32\CCM>icacls cache
cache BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(F)
To totally rule out the permissions being an issue - I added Authenticated Users and granted Full Control - with the same result.
C:\Windows\System32\CCM>icacls logs
logs NT AUTHORITY\Authenticated Users:(OI)(CI)(F)
OWNER RIGHTS:(OI)(CI)(IO)(S)
BUILTIN\Users:(OI)(CI)(R)
Thanks,
Gavin
Hmmm. Okay. We're going to have to get analytical on this one, then.
Can you enable ExtPack logging on both the ExtPack server where you are running the Computer Explorer, as well as the client you are querying.
To enable logging on the server, navigate to System Configuration | EminentWare Servers, select the server, and on the Automation Server Settings tab, set Logging to ENABLED and set Logging Output to '3'.
On the client this will need to be enabled in the registry. At HKLM\Software\EminentWare\Logging, set the Enable value to '1' and the Options value to '3'.
Open the Computer Explorer, navigate to Client Logs, attempt to read one or two logfiles, then close Computer Explorer and disable logging.
On the server, the logfiles will be found in %ProgramFiles%\EminentWare\Server; on the client they will be found in %ProgramFiles%\EminentWare\WMIProvider.
Bundle up all of the logs created on that date and email them to us. I've got a developer standing by to help analyze what is happening (or not, as the case may be).
Have emailed the log files as requested.
