Protect your Event Log

View all tweaks

Tweak #29 - april 10, 2002

By default, all users can read your event log over the network.

If you don't want this, use this registry hack to disable the default Event Log sharing.

The tweak

Go to the registry key:


This key has three subkeys, one for each log. They are called Application, Security and System.

In every key, create the following REG_DWORD value:


Set this value to 1.

You can of course choose which logs to protect.

Download reg file

Download tweak29_application.reg

Download tweak29_security.reg

Download tweak29_system.reg

Download tweak29_all.reg

Download reg file to restore the default

Download tweak29_restore.reg