Hi Mike,

>I would guess that in many companies the permissions are also limited as to "who and what" can write to an eventlog.

There are several event logs in Windows that have different permissions. Everyone can read from and write to the Application event log (which is what WSH can only do), but only Administrators can clear the log. Anyone can read the System log, but only Administrators can write or clear it. Administrators can read and clear the Security log, but only the system can write to the log.

Administrators can change this by specifying their own security descriptor as explained in "KB323076 - How to set event log security locally or by using Group Policy in Windows Server 2003".