You can read and write to certain areas of the eventlog and registry even if you are not logged in as an administrator. For registry you can always read and write to HKEY-CURRENT-USER. With the event log only administrators have access to the Security Log. Does this help a little?
