You need to ensure that only the members of the Power Users group and the members of the Administrators group can view the events in the System log.
Which tools should you use?
A.
Wecutil
B.
Event Viewer
C.
Local Group Policy Editor
D.
Local Users and Groups
The correct answer is D “Event Log Readers Group”
C is the correct answer.
Using the Event Log Readers Group will grant permissions to read ALL logs, not just the System log. In order to grant the minimum permissions necessary, Local Group Policies must be used to add SDDL entries for the logs in question.
http://blogs.technet.com/b/janelewis/archive/2010/04/30/giving-non-administrators-permission-to-read-event-logs-windows-2003-and-windows-2008.aspx