By disabling the default Event Log sharing you can restrict that all users
can read your event log over the network.To do so navigate to :
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\
The Eventlog key has minimum 3 subkeys : Application , Security , System
Create now in each of this 3 subkeys in the right pane a
REG_DWORD [DWord Value] entry and name it :
RestrictGuestAccess
(right click in right pane , new , REG_DWORD [DWord Value] and name
it as above)
Doubleclick now this entry and set it's value to 1.
Note:If you just want to protect one log,for example system,then apply
the above mentioned procedure just on the subkey whose log
you want to protect.

|