My ASP.NET application needs to be able to write to the windows event log and read from the windows event log using WMI. I don't want the application account- currently NETWORK SERVICE, to be able to delete or modify event log entries.
Yeah, I konw that a malicious user would still be able to clear the event log by flooding it until it rolls over, but I can live with that.
EDIT: Another way to put the question-- is there any way I can have my app write to the windows event log (application, or custom log) and know the log entries weren't subsequently tampered with by the application that wrote the log entry?
EDIT: If the solution requires using something other than the default NETWORK SERVICE account to run asp.net, that's good too.