Could someone tell me, what permissions are required to get the event viewer service running under local service account on windows 7?
I understand that local service will require some permissions to parts of the system drive, i.e. %systemroot%\system32\winevt does anyone know what they are specifically?
Perhaps access to the service itself, so full control on Windows event viewer service?
What about registry access? what does local service need for it to work?
Is there any resource i can find on this? or anyone who might know please? thank you kindly.