How to Give Read Only Permissions to the Event Viewer ?

Step 1

Open the registry of the respective system on which you have to give the permissions

My Computer à HKLM à SYSTEM à ControlSet001 à Control à SecurePipeServers à{ winreg }

Right Click à Permissions à

Add the user ID and set the permissions.

Check that the permissions should apply on below registry values too

{AllowedExactPaths}

{AllowedPaths}

Step 2

My Computer à HKLM à SYSTEM à ControlSet001 à Services à Eventlog à Application

Add following value in {CustomSD}

(A;;0x3;;;AU)

Do the above addition for Security and System too.

Step 3

Unregister the scecli.dll

Command : regsvr32 scecli.dll /u

register the scecli.dll

Command : regsvr32 scecli.dll

Step 4

Open System32 Give the permissions on the scecli.dll

Right Click on the scecli.dll

Properties à Security à Add User name

Set the read only permissions