How can I restrict guest access to Event logs?

John Savill

December 21, 1999

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. By default guests and anonymous can view the event log, this maygive away important information and so anonymous/guest access can be disabled asfollows:

  1. Start the registry editor (regedit.exe)

  2. Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLog

  3. Move to the subkey Application

  4. From the Edit menu select New - DWORD value. Enter a name of RestrictGuestAccess. click OK

  5. Double click the new value and set to 1

  6. Repeat steps 4 and 5 for the Security and System sub-keys also.

In fact this is also governed by the registry rights on the correspondingeventlog paramters (HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLog- application and system). You can even remove Administrators rights to read thefiles by using the registry rights. Use REGEDT32.EXE to change these rights.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like