Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Error message when you try to install or upgrade Exchange Server: "Cannot open log for source ‘MSExchangeSetup.’ You may not have write access"

Error message when you try to install or upgrade Exchange Server: "Cannot open log for source ‘MSExchangeSetup.’ You may not have write access"

Symptoms

You receive an error message that resembles the following when you try to install or upgrade Microsoft Exchange Server. For example, this issue can occur when you try to upgrade Microsoft Exchange Server 2010 Service Pack 1 (SP1) to Exchange Server 2010 SP2:
Cannot open log for source ‘MSExchangeSetup.’ You may not have write access


at System.Diagnostics.EventLog.OpenForWrite(String currentMachineName)
at System.Diagnostics.EventLog.InternalWriteEvent(UInt32 eventID, UInt16 category, EventLogEntryType type, String[] strings, Byte[] rawData, String currentMachineName)
at System.Diagnostics.EventLog.WriteEvent(EventInstance instance, Byte[] data, Object[] values)
at Microsoft.Exchange.Setup.Common.SetupEventLog.LogEvent(Int64 eventId, Int32 categoryId, EventLogEntryType type, Object[] messageArgs)
at Microsoft.Exchange.Setup.Common.ConfigurationDataHandler.OnSaveData()
at Microsoft.Exchange.Management.SystemManager.WinForms.SingleTaskDataHandler.OnSaveData(CommandInteractionHandler interactionHandler)
at Microsoft.Exchange.Management.SystemManager.WinForms.DataHandler.Save(CommandInteractionHandler interactionHandler)
at Microsoft.Exchange.Management.SystemManager.WinForms.DataHandler.OnSaveData(CommandInteractionHandler interactionHandler)
at Microsoft.Exchange.Management.SystemManager.WinForms.SingleTaskDataHandler.OnSaveData(CommandInteractionHandler interactionHandler)
at Microsoft.Exchange.Management.SystemManager.WinForms.DataHandler.Save(CommandInteractionHandler interactionHandler)
at Microsoft.Exchange.Management.SystemManager.WinForms.DataHandler.OnSaveData(CommandInteractionHandler interactionHandler)
at Microsoft.Exchange.Management.SystemManager.WinForms.SingleTaskDataHandler.OnSaveData(CommandInteractionHandler interactionHandler)
at Microsoft.Exchange.Management.SystemManager.WinForms.DataHandler.Save(CommandInteractionHandler interactionHandler)

at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

Access is denied

Additionally, you may receive an error message that resembles the following when you try to view the Application log or the System log in Event Viewer:

Event Viewer cannot open the event log or custom View. Verify that Event log service is running or query is too long. Access Denied (5)

↑ Back to the top

Cause

This issue occurs if the CustomSD registry value is incorrect.

↑ Back to the top

Resolution

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application
  3. Verify that the CustomSD value contains the following string (The screen shot for this step is listed below): 

    (A;;0x7;;;BA)

    The screen shot for this step

    If the CustomSD value does not contain this string, go to the next step.
  4. Right-click CustomSD, and then click Modify.
  5. In the Value Data box, edit the CustomSD value so that it contains the string in step 3, and then click OK (The screen shot for this step is listed below).

    The screen shot for this step
  6. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\System
  7. Repeat steps 3 through 5 for the registry subkey in step 6.
  8. Exit Registry Editor.
  9. Try to install or upgrade Exchange Server again.

↑ Back to the top

References

For more information about the CustomSD registry value, visit the following MSDN website:
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
For more information about how to set event log security locally or by using Group Policy in Windows Server 2003, see the following article in the Microsoft Knowledge Base:
323076 How to set event log security locally or by using Group Policy in Windows Server 2003

↑ Back to the top

Keywords: kbsurveynew, kbentirenet, kbprb, kbtshoot, kb

↑ Back to the top

Article Info
Article ID : 2701175
Revision : 1
Created on : 1/7/2017
Published on : 9/3/2013
Exists online : False
Views : 85