Clear security audit log permissions

[Mary]

I'm supposed to allow an auditing person be able to review
and clear the audit logs from their workstation. That
person has the "Manage auditing and security log" User
Right and he can view the audit logs. However he cannot
clear the logs. I gave him administrative rights to
the .evt file, but still the same results. I don't want
to give him administrative rights over the server. Can
you help?

 

[Marco]

Hi Mary

are the logs located on their workstation or on the server?

 

[Bobby McMillan [MSFT]]

What is the error retured to the user?


--------------------
| From: "Marco" <[email protected]>
| References: <[email protected]>
| Subject: Re: Clear security audit log permissions
| Date: Tue, 16 Mar 2004 12:07:21 +0100
| Lines: 20
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.win2000.security
| NNTP-Posting-Host: 158.64.60.60
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.security:23751
| X-Tomcat-NG: microsoft.public.win2000.security
|
| Hi Mary
|
| are the logs located on their workstation or on the server?
|
| --
| Marco [ www.neovalens.com ]
| --
|
| | > I'm supposed to allow an auditing person be able to review
| > and clear the audit logs from their workstation. That
| > person has the "Manage auditing and security log" User
| > Right and he can view the audit logs. However he cannot
| > clear the logs. I gave him administrative rights to
| > the .evt file, but still the same results. I don't want
| > to give him administrative rights over the server. Can
| > you help?
|
|
|

This posting is provided "AS IS" with no warranties, and confers no rights.
===========================================================================