We seem to be having problems enabling the event log analyzer to connect to a new Windows 2012 server box. The system is working fine connecting to 2003 and 2008 boxes. The error code being received is 80070005 access is denied. If I look at the events on the 2012 box I can see a successful login is carried out followed by a log off straight after event-id 4624 and 4634.

I have checked the firewall logs and there doesn't appear to be anything blocked.

Andrew