In my enterprise, we have ePO 4.5 with Mcafee Agent 4.5 and VirusScan Enterprise 8.7.
On Windows XP, all Agent Logs are saved in C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\DB
To see Agent log, you can do, Select workstation in ePO and click "Show Agent Log" or in browser write http://hostname:8081.
So, in domain, all users can see the Log of another workstation, by browser.
It's possible, in ePO, configure just one group (example: admin users) to see the log and no all users of domain?