Access to the security log required???

Hello,

We normally lockout view access to the security log for
our users. We have been doing this for years. Just
recently, some critical updates will not install unless
the user installing them has view access to the security
log. Does anyone have any info on this? We don't want our
users to view the security log, but still want them to run
windows update. An example of an update that would not
install unless the user had access to view the security
log is KB841873.

Thanks
Mark