Need for "Manage auditing and security log" User Right

We recently had some issues with installing updates that were resolved by

reassigning the "Manage auditing and security log" user right to

administrators.

The problem is that the organization I supports requires strict separation

of duties between administrators and security managers, and we need to

prevent administrators from tampering with auditing or security logs.

Is there a reason that this user right is specifically needed to install

Windows Updates? Is there a workaround? If not, can Microsoft consider

changing a future version of automatic updates to not require this particular

user right?

Thanks.

--

Jeffrey Harris, MCSE W2K and W2K3.

Please remove the '1's from the e-mail address before sending.