Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
World desk4 min

iSCSI Initiator: Check Event Log Rights When Startup Is Denied

A reported iSCSI Initiator Error 5 was resolved by restoring System Event Log permissions changed during Event Forwarding setup. Here’s how to investigate that lead safely.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If the Microsoft iSCSI Initiator Service fails to start with “Access is denied” (Error 5), check System event log permissions and effective Event Forwarding policy—especially if the failure began after a policy change. A Windows Server administrator reported resolving this exact symptom by restoring System Event Log rights that had been changed while enabling Event Forwarding. That is a community-reported fix, not a universal diagnosis; Error 5 alone does not identify which permission blocked startup.

What the error tells you—and what it does not

“Access is denied” means Windows denied an operation, but the message by itself does not reveal whether the cause is an event log permission, an effective policy, or another access control. In the matching Microsoft Q&A report, Service Control Manager event 7023 accompanied the Microsoft iSCSI Initiator Service failure. The administrator said the problem recurred intermittently after reboots on Windows Server 2022 and Windows 11, then marked it solved after correcting System Event Log rights.

As an Amazon Associate I earn from qualifying purchases.

The respondent, Rob Mulder, described the resolution as: “It was due to wrong rights on the System Eventlog.” He said the rights had been changed while enabling Event Forwarding and that restoring them to default allowed the service to start. This is a reported incident, not a Microsoft-authored root-cause finding or a guarantee that the same change explains another system. Read the Microsoft Q&A case.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Start with the evidence on the affected computer

  1. Record the failure. Note the exact service error, the Service Control Manager event ID, and the timestamp in the System log. Event 7023 appeared in the reported case, but confirm the event details on your own system rather than assuming they will match.
  2. Check what changed. Look for recent Event Forwarding setup, Group Policy changes, or other changes that define event log access. On a managed computer, review the effective computer policy and involve the administrator responsible for that policy.
  3. Inspect System log access carefully. Compare the current permissions with a known-good configuration for the same Windows version and organizational requirements. Microsoft documents inspecting the System log and its SDDL in a separate Task Scheduler Error 5 scenario; use that as context for investigation, not as an iSCSI-specific repair recipe.
  4. Test suspected changes separately. If a policy edit or security-software change is a plausible lead, isolate one change at a time through your organization’s normal change process. Avoid changing multiple controls together, which makes it harder to identify the cause or safely reverse the change.

How to inspect System event log permissions safely

Microsoft’s Task Scheduler troubleshooting guidance describes a different Error 5 failure in which NT AUTHORITYSYSTEM lacks write permission to the System event log. It notes that the CustomSD registry value can be used to modify log permissions and describes querying the log with wevtutil get-log "SYSTEM". This is useful background when investigating log access, but it does not establish that the iSCSI service runs under the same account or fails for the same reason.

#1 Best Overall
Supchargadap NACS to CCS Adapter Storage case
  • 【Fast Charging Max】: This NACS to CCS adapter supports TSLcharging rates of up to 120 kW to ensure your EV is charged at optimal speeds, greatly reducing downtime, and is ideal for those who require a fast, efficient supply of power, with a charge speed of up to 80 miles in 14 minutes (actual charging speeds are dependent on Supercharger station, EV specifications, ambient conditions and battery temperature).
  • 【NACS DC Adapter Supercharger】: The adapter is compatible with v3 and v4 TSL superchargers.Made with one-piece stamping technology and molded in one piece, it is rated up to 80 amps and 240 volts, so you can get going fast!
  • 【Widely Compatible】: This NACS to CCS1 adapter for non-TSL CCS1 electric cars can be charged by TSL supercharger nacs to ccs adapter station, currently supported models are Ford/Rivian/GMC/Chevrolet/Cadillac.(Note: unsupported models can't use this adapter Supercharger)
  • 【Safety First】: The Vortex Plug includes built-in temperature monitoring, charging power may decrease if the terminal exceeds 185°F, Operation shuts off at a 131°F charging handle temperature. Prevents leakage of electricity, fire and other hazards.
  • 【Easy To Carry】: This adapter has a compact design, not easy to damage, easy to store in the armrest box or storage box in the car. It also comes with a storage bag that can be hung anywhere. (WARNING : Do not store the NACS DC Adapter outside of the storage temperature range of - 40°F to 185°F)

Use Microsoft’s Task Scheduler Error 5 guidance to understand the log-permission checks. Do not paste an SDDL string or copy permissions from another computer without validating the principals and intended policy for your environment. On a managed server, coordinate any correction with the policy owner: a local change may be overwritten by Group Policy, and an overly broad permission change can weaken log access controls.

When Event Forwarding or Group Policy is involved

The accepted answer in the matching Q&A case tied the failure to System Event Log rights changed during Event Forwarding setup. A commenter also reported resolving their own case by moving a server out of an organizational unit containing an Event Forwarding policy. These are separate user reports; they support reviewing effective policy, not removing a server from an OU as a default fix.

Rank #2
Onerbl 12V AC/DC Adapter for QNAP HS-210 HS-251 HS-251-US TS-212-E TS-212E 2-Bay TS-119P II PII 1-Bay SATA iSCSI eSATA NAS Media Diskless System Network Storage Turbo NAS Server Power Supply Cord
  • Brand New, High Quality Replacement Power Charger Adapter
  • Input: AC 100-240V 50/60Hz Auto (Worldwide AC Input),10Ft extra Long cord
  • Over Voltage Protection, Over Heat Protection
  • Tested Units. In Great Working Condition.

Microsoft’s SQL Server Agent documentation gives another example of the general mechanism: Configure log access Group Policy can prevent a service account from writing to an event log and lead to Error 5. That article concerns SQL Server Agent and the Application log, so it is background on how event-log policy can affect services—not an iSCSI policy recipe. See Microsoft’s SQL Server Agent Error 5 guidance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keep device and driver checks in the right troubleshooting branch

A missing or unknown iSCSI device is a different observation from a service-startup Error 5. Microsoft’s Azure Backup recovery guidance addresses that separate scenario: it directs readers to check Device Manager for Microsoft iSCSI Initiator or an Unknown Device with hardware ID ROOTISCSIPRT, update the driver if needed, restart the Microsoft iSCSI Initiator Service, and retry recovery. Those steps are relevant when troubleshooting that Azure Backup recovery/device condition; Microsoft does not document them there as a fix for access-denied startup failures.

Rank #3
SLLEA AC/DC Adapter for QNAP TS-119P II PII 1-Bay SATA iSCSI eSATA NAS Media Network Storage Server Power Supply Cord Cable PS Charger Input: 100-240 VAC Worldwide Use Mains PSU
  • SLLEA--Determined to become the most professional store of wire and chargers
  • Input: 100 - 240 VAC 50/60Hz Worldwide Voltage Use Mains PSU
  • Please make sure the output and tip is correct before purchasing
  • Industry Quality : Over Voltage Protection, Over Heat Protection
  • Warranty: 30 Days Money Back Guarantee / 60 Days Free Exchange With Paid Return Label / 360 Days Anytime Worry-Free Warranty! / Please don't hesitate to contact us if any questions or concerns - we are here to help!

Use Microsoft’s Azure Backup system-state recovery guidance when the recovery workflow or device detection is the issue. For an ordinary startup failure with Error 5, first follow the evidence around event log access and policy.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What to make of antivirus as a possible cause

A commenter in the Q&A thread suspected antivirus interference with svchost.exe -k netsvcs -p, but said they had not separated antivirus from the Group Policy explanation. Treat this as an unconfirmed lead, not an established cause. If security software changed near the time the failure began, work with its administrator to test that hypothesis separately and safely; the report does not support disabling protection as a general fix.

Quick Recap

Bestseller No. 2
Onerbl 12V AC/DC Adapter for QNAP HS-210 HS-251 HS-251-US TS-212-E TS-212E 2-Bay TS-119P II PII 1-Bay SATA iSCSI eSATA NAS Media Diskless System Network Storage Turbo NAS Server Power Supply Cord
Onerbl 12V AC/DC Adapter for QNAP HS-210 HS-251 HS-251-US TS-212-E TS-212E 2-Bay TS-119P II PII 1-Bay SATA iSCSI eSATA NAS Media Diskless System Network Storage Turbo NAS Server Power Supply Cord
Brand New, High Quality Replacement Power Charger Adapter; Input: AC 100-240V 50/60Hz Auto (Worldwide AC Input),10Ft extra Long cord
$11.98
Bestseller No. 3
SLLEA AC/DC Adapter for QNAP TS-119P II PII 1-Bay SATA iSCSI eSATA NAS Media Network Storage Server Power Supply Cord Cable PS Charger Input: 100-240 VAC Worldwide Use Mains PSU
SLLEA AC/DC Adapter for QNAP TS-119P II PII 1-Bay SATA iSCSI eSATA NAS Media Network Storage Server Power Supply Cord Cable PS Charger Input: 100-240 VAC Worldwide Use Mains PSU
SLLEA--Determined to become the most professional store of wire and chargers; Input: 100 - 240 VAC 50/60Hz Worldwide Voltage Use Mains PSU
$33.89
Bestseller No. 5
Vogzone for MCX312B-XCCT ConnectX-3 Pro EN 10GbE Dual SFP+ PCIe 3.0 x8 NIC
Vogzone for MCX312B-XCCT ConnectX-3 Pro EN 10GbE Dual SFP+ PCIe 3.0 x8 NIC
【Controller】: 10GbE PCI-E NIC with Original Mellanox ConnectX-3 controller.
$75.00
Best Value
Vogzone for MCX312B-XCCT ConnectX-3 Pro EN 10GbE Dual SFP+ PCIe 3.0 x8 NIC
  • 【Controller】: 10GbE PCI-E NIC with Original Mellanox ConnectX-3 controller.
  • 【Data Rate】:Dual SFP+ Ports(1GbE/10GbE) let you connect to network cable for meeting the demands of data center environments. PCIe v3.0 (8.0GT/s) x8(Compatible with 2.0/1.1); X8/X16 Lane.
  • 【Technical Support】:iPXE, DPDK, iSCSI, Qos, Jumbo Frames, SR-IOV, Network Virtualization Offloads(Geneve, VXLAN and NVGRE).
  • 【Technical Support】:iPXE, DPDK, iSCSI, Qos, Jumbo Frames, SR-IOV, Network Virtualization Offloads(Geneve, VXLAN and NVGRE).
  • 【What you Get】: Vogzone 10GbE PCI-E X8 Network Card MCX312B-XCCT-10G (compare to Mellanox MCX312B-XCCT ) x1, Low-profile Bracket x1.
Rank #4
CX4121A Dual 25Gb/s SFP28 Fiber Ports Intelligent RDMA Ethernet Adapter for Virtualization and Storage Servers, Mellanox ConnectX-4 Lx EN MT27711A0 Ethernet Controller, 2X 25GbE PCIE 3.0 x8 NIC Card
  • 1. CX4121A is a dual 25GbE SFP28 fiber port intelligent RDMA Ethernet adapter with a PCIE Gen 3.0 x8 interface. Based on the Mellanox ConnectX-4 Lx EN MT27711A0 converged Ethernet controller, it provides a cost-effective and flexible Ethernet solution for Web 2.0, cloud, data analytics, database, and storage platforms.
  • 2. Ethernet Controller: Mellanox ConnectX-4 Lx EN MT27711A0;Bus Interface: PCIE 3.0 x8; Ethernet Speed: 2x 25GbE; Connector Type: 2x SFP28 Fiber Ports; Remote Boot: RoCE, PXE, iSCSI; Supports RDMA over RoCE; Support I/O Virtualization and SR-IOV; Support Overlay Networks by providing advanced NVGRE, VXLAN and GENEVE.
  • 3. Supports IEEE 802.3by, 25 Gb/s; IEEE 802.3ae 10Gb/s; IEEE 802.3az Energy Efficient Ethernet; IEEE 802.3ap; IEEE 802.3ad; 802.1AX; IEEE 802.1Q; 802.1P VLAN tags and priority; IEEE 802.1Qaz; IEEE 802.1Qbb; IEEE 802.1Qbg; IEEE 1588V2; Support Jumbo frame (9.6KB).
  • 4. PCIE Gen 3.0 Standard, 8Gb/s Per Lane. PCIE x8 Interface, 64Gb/s Bandwidth Totally, Ensure 2x SFP28 Fiber Ports archive 25GbE simultaneously. Auto-negotiates to PCIE X8, X4 Lane. Auto-switch to PCIE Gen 3.0, Gen 2.0. Support MSI/MSI-X mechanisms.
  • 5. Support plug and play on Windows 11, 10 64bit and Windows Server 2012, 2012R2, 2016, 2019, 2022, 2025 64bit. Compatible with RHEL, CentOS, FreeBSD, VMware and other Linux kernel-based systems.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.