Made a small modification to the EventLogger so that it doesn't need to request permission each time it logs a message. Running eventcreate with elevated privileges once will create a event source using the source it was called with. From then on any calls to eventcreate that use the same source will not require elevated privileges. Now elevate.cmd will only be called when permissions are required.
regedt32 is a great tool for monitoring the Event Logger's permissions. To see which applications have permission to log to the Event Logger go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application
coreybutler
commented
7 years ago
Made a small modification to the EventLogger so that it doesn't need to request permission each time it logs a message. Running
eventcreatewith elevated privileges once will create a event source using the source it was called with. From then on any calls toeventcreatethat use the same source will not require elevated privileges. Nowelevate.cmdwill only be called when permissions are required.regedt32 is a great tool for monitoring the Event Logger's permissions. To see which applications have permission to log to the Event Logger go to
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application