I noticed a Windows 2008 documentation and checked a local "Event Log Readers" group for Windows 2008 based member servers. The question that I have is, does this capability cover a Windows 2008 domain controller? I cannot see anything in Active Directory and was thinking if this capability can be extended to a DC or if SDDL string manipulation is still the only was to delegate log access? Thanks.
Bookmarks