Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can I disable logs and remove event id 1102 (=log cleared event)? I already tried:

Auditpol /set /category:* /success:disable

But that didn't work for audit successful event 1102!

share|improve this question

You must log in to answer this question.

Browse other questions tagged .