Re: WINS could not start - Problem with logs

From: Henry Craven (IUnknown_at_Dot.Nyet)
Date: 10/11/04 

Date: Mon, 11 Oct 2004 22:03:21 +1000

Nice to get a result.

I'd suggest potting a subscription to Event ID in your ToolBag.
http://www.eventid.net/

The level of event logging that is considered Required, Adequate or
Excessive is pretty much personal to the Administrator and security
requirements of the Domain, and his/her level of confidence in the
security/domain setup at any point in time. It's not a one shoe fits
all, so sort if that doesn't really provide an answer. 

-- 
Henry Craven {SBS-MVP}
    Melbourne Australia
"Simon Alliott" <administrator@elmmax.co.uk> wrote in message
news:OZ0sYP2rEHA.596@TK2MSFTNGP11.phx.gbl...
> Henry
>
> Thanks very much
> Both  solutions worked perfectly.
>
> Now to pick your brains. The security log is full of Success Audit
events
> 540, 576 and 538 plus one or two others. These are routine logonlogoff
> events but appear several times a second. Is this really necessary as
it
> seems to me that logging so frequently means important stuff will be
missed.
> I've been meaning to ask this for months.
>
> Simon