On domain controllers whenever going to a log file I got the following error:
Unable to complete the operation on "event log".
Access is denied.
To resolve this remove the domain admin account from the Built In Guests group in AD Users and Computers.
Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
In the left pane, expand the domain name, and then click Builtin.
In the right pane, double-click Guests, and then click the Members tab.
In the Members list, click your user account and remove it. Please note that it may be nested inside a group!