How do I secure a custom event log

From: Chris Stagnaro (anonymous_at_discussions.microsoft.com)
Date: 05/27/04


Date: Thu, 27 May 2004 11:01:06 -0700

Our application was developed on W2K. We created a service that has elevated privleges so that it could write to the security log. This was necessary to satisfy our customers audit requirements.

Under Windows XP only the LSAS is allowed to write to the security log. Therefore our service now fails and out application is not allowed to run if it cannot perform its required audits.

It was simple to create a custom event log. But I need the security attributes of the Security Event log, e.g. only adminstrators can clear the log, the clearing of the log is an audited event, etc. Does anyone know if it is possible to accomplish this, and if so, can you point me to any information that explains it.

Thanks,
Chris