Is there a place in group policy in which you can define who can read the
security logs? In our shop, we have domain controllers at sites in which the
IT staffs are not domain admins but still need to be able to see the
security logs to look for account lockouts.
 
 
Thanks in advance,
 
 
T. Steven...

[ more ]