Made a small modification to the EventLogger so that it doesn't need to request permission each time it logs a message. Running eventcreate with elevated privileges once will create a event source using the source it was called with. From then on any calls to eventcreate that use the same source will not require elevated privileges. Now elevate.cmd will only be called when permissions are required.
regedt32 is a great tool for monitoring the Event Logger's permissions. To see which applications have permission to log to the Event Logger go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application
Made a small modification to the EventLogger so that it doesn't need to request permission each time it logs a message. Running
eventcreate
with elevated privileges once will create a event source using the source it was called with. From then on any calls toeventcreate
that use the same source will not require elevated privileges. Nowelevate.cmd
will only be called when permissions are required.regedt32 is a great tool for monitoring the Event Logger's permissions. To see which applications have permission to log to the Event Logger go to
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application