Guest access to event logs (Windows)

Module: System Auditing

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports a problem when the Guest account can access the security, application, or system event log files.

The following table lists the error message for the check.

Table: Error message for Guest access to event logs

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_EVENTLOG_RESTRICT_ACCESS

Category: Policy Compliance

  • Windows 2000 (106138)

  • Windows 2003 (206138)

  • Windows 2008 (249138)

  • Windows Vista (229138)

  • Windows XP (201138)

Title: Guest can access event logs

Description:The Guest account can access the security, application, or system event log files.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]