Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

Unable to set winrm perameter

Created: 18 Jul 2013 • Updated: 23 Jul 2013 | 7 comments
Milan_T's picture
This issue has been solved. See solution.

Hi all,

I have win 2k8 r1 which need to integrate with ssim.

But i am unable to set winrm perameter.


Operating Systems:

Comments 7 CommentsJump to latest comment

Milan_T's picture

Hi Rafeeq,

I have seen article and it is very good.

But it does not contains my query data.

I have also noticed two posibilities to give the Network Service account the right permission.

We can either add the account to the Event Log Readers group on the Windows 2008 machine from which you want to collect the Security log:
net localgroup "Event Log Readers" "NT Authority\Network Service" /add

or we can give the Network Service account read access to the Security log by changing the channel access:
wevtutil sl security /ca:O:BAG:SYD:(A;;0xf0005;;;SY)(A;;0x5;;;BA)(A;;0x1;;;S-1-5-32-573)(A;;0x1;;;S-1-5-20)

I have applied first one and ignored second one issue got resolved.

lukaszfr's picture

Try with RootSDDL instead of RootSSDL...

Milan_T's picture

I have changed RootSDDL but still i am facing below mentioned error.


bucknet's picture

It looks like you have a space between the third ; and the beginning of S-1-5-21... string.

lukaszfr's picture

No, empty space should not be a problem.
There is one small mistake inside the RootSDDL value, somewhere in the middle "S::P" should be replaced by "S:P". This doubled colon is causing the error.

Milan_T's picture

Hi Antilles,

I have applied this change and issue got resolved.

Conclusion: use RootSDDL instead of RootSSDL and "S:P" instead of "S::P".