Answer the question
In order to leave comments, you need to log in
How to close access to Windows XP logs to the Administrator?
How to close access to the Windows XP logs to the Administrator, but leave it to the Information Security Administrator account? - The requirement of the Central Bank.
Answer the question
In order to leave comments, you need to log in
Go to the policies, find the audit and security log management, remove the administrators group from those with access, add the Information Security Administrator.
If you don't trust your admins, replace them.
You can disable access to OS logs for a user with local administrator rights, but as a local administrator, he can go into local policies and regain access.
You can deny him access with a full Deny, but he can use the Change Owner right on behalf of the system and regain access.
The local administrator is the local administrator.
If you need to give the user a little more rights in the system, but do not allow him to change system settings - give him the rights of an Power User by adding him to the group of the same name.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question