Unable to Access Event Log (Error 1783) on Windows Server 2025

Overview

This article explains the issue where Lepide is unable to access event logs from Domain Controllers running on Windows Server 2025 and provides the recommended resolution.

Issue

Connection Failed. Reason: Unable to access event log 1783. Make sure that Windows Event Log Service is running.

Environment

• Lepide Server: Windows Server 2022

• Domain Controllers: Windows Server 2025

• Auditing Method: Without Agent

Cause

Windows Server 2025 includes enhanced security restrictions that limit remote access to Event Logs. When using the Without Agent auditing method, Lepide depends on RPC/WMI, which may be restricted.

Symptoms

• Error 1783 during DC connectivity

• Events visible locally but not in Lepide

• Issue specific to Server 2025 DCs

Resolution

Switch to "With Agent" auditing method.

Steps

1. Open Lepide Console

2. Go to Settings

3. Click Domain > Properties

4. Under Domain Credentials, select "With Agent"

5. Click OK

Post-Change

Agent deployment may take up to 15 minutes. Verify status and confirm logs are collected.

Notes

This is expected due to OS-level changes. Agent-based auditing is recommended.