Can I disable logs and remove event id 1102 (=log cleared event)?
I already tried:
Auditpol /set /category:* /success:disable
But that didn't work for audit successful event 1102!
Sign up using Google
Sign up using Facebook
Sign up using Stack Exchange
3 years ago