Add Access control or UAC prompt to windows event viewer

Question

Looking at controlling access to Windows event viewer for standard users. does anyone know if there is a mechanism to perform a UAC prompt when windows event viewer is run or restrict access to certain logs example PowerShell the way security events is restricted?

Answer 1

Hello,

Yes, it is possible to control access to the Windows Event Viewer for standard users and implement mechanisms such as UAC prompts or restricting access to certain event logs. Here are a few methods you can try:

Use Group Policy settings to control access to the Event Viewer. Group Policy allows you to manage user rights and permissions on a Windows domain network. You can restrict access to the Event Viewer by configuring the appropriate Group Policy settings.

Registry Editor: Use the Registry Editor to modify permissions for the Event Viewer. Navigate to the following registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System”. Look for the “DisableRegistryTools” DWORD value and set it to “1” to disable access to the Event Viewer. Please note that modifying the registry should be done cautiously as it can impact system stability if not done correctly.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.