How can I restrict guest access to Event logs?
December 21, 1999
A. By default guests and anonymous can view the event log, this maygive away important information and so anonymous/guest access can be disabled asfollows:
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLog
Move to the subkey Application
From the Edit menu select New - DWORD value. Enter a name of RestrictGuestAccess. click OK
Double click the new value and set to 1
Repeat steps 4 and 5 for the Security and System sub-keys also.
In fact this is also governed by the registry rights on the correspondingeventlog paramters (HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLog- application and system). You can even remove Administrators rights to read thefiles by using the registry rights. Use REGEDT32.EXE to change these rights.
About the Author
You May Also Like