How to restrict users from deleting things from event viewer
We have Win 7 pc's running in the environment and the DC's are server 2008 R2..
How can I via GPO stop users from deleting things in the event viewer and from deleting the log files for them?
How can I via GPO stop users from deleting things in the event viewer and from deleting the log files for them?
strivoli
Are the users part of the local Administrators or Users group?
ASKER
They are part of the users group and local administrator group
Demote them and make them part of the local Users group only. Start with a few of them and if there aren't any issues apply same solution to all of them.
Users shouldn't be part of the local Administrators group. For this and MANY other reasons.
Users shouldn't be part of the local Administrators group. For this and MANY other reasons.
ASKER
Sorry there not part of the local administrators group and I need to make this change for all the users via a GPO so we don't have to visit each pc...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ok I found the GPO...
Thanks
Thanks
You are welcome. Please help us keep EE clean.
If I did help, accept an answer in order to close the question.
If I didn't help, delete the question.
Thank you.
P.S.: optionally, you might explain which else solution you found suitable and accept that solution. This helps others with similar issues.
If I did help, accept an answer in order to close the question.
If I didn't help, delete the question.
Thank you.
P.S.: optionally, you might explain which else solution you found suitable and accept that solution. This helps others with similar issues.
ASKER
GPO