Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Can I disable logs and remove event id 1102 (=log cleared event)? I already tried:

Auditpol /set /category:* /success:disable

But that didn't work for audit successful event 1102!

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.