Recently came across an issue where an “Access Denied” message would be given when trying to view the System or Application logs.

The problem stemmed from a developer adding “Everyone” into the “Guests” group on the server.  Since Windows 2000, Guests are not allowed to view these logs.

The fix was simple- remove “Everyone” from the “Guests” group.

This is a good example why Developers shouldn’t have Admin access!