Long story short I changed the Default Domain GPO (stupid I know) so that only Administrators had the Manage auditing and security log right under Computer Configuration > Security Settings > Local ...
The location at which I work has a serious problem: Group Policy has not been designed by consensus or cooperation, and instead has been the product of eight different people running around slapping ...