U
U
Uncle Seryozha2015-08-25 13:01:18
System administration
Uncle Seryozha, 2015-08-25 13:01:18

How to close access to Windows XP logs to the Administrator?

How to close access to the Windows XP logs to the Administrator, but leave it to the Information Security Administrator account? - The requirement of the Central Bank.

Answer the question

In order to leave comments, you need to log in

3 answer(s)
A
Artem @Jump, 2015-08-25
@Protos

Go to the policies, find the audit and security log management, remove the administrators group from those with access, add the Information Security Administrator.

M
mace-ftl, 2015-08-25
@mace-ftl

The most correct way is to remove administrator rights)

S
Sergey Kovalev, 2015-08-25
@Sergey-S-Kovalev

If you don't trust your admins, replace them.
You can disable access to OS logs for a user with local administrator rights, but as a local administrator, he can go into local policies and regain access.
You can deny him access with a full Deny, but he can use the Change Owner right on behalf of the system and regain access.
The local administrator is the local administrator.
If you need to give the user a little more rights in the system, but do not allow him to change system settings - give him the rights of an Power User by adding him to the group of the same name.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question