The 'Manage auditing and security log' user right should be assigned to the appropriate accounts. [Administrators] (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Manage auditing and security log oval:org.secpod.oval:def:18878 SCAP Repo OVAL Definition 2014-05-29