Re: Event viewer/security log

Not really a problem, just wondered why the sec. log on my XPhome gets a lot
of events, while the one on my XPpro is always empty..

I'll just let it be..


--
=================================
Most learned on these newsgroups
Tumppi, Helsinki, FINLAND
(translations from/to FI not always accurate
=================================




"Nepatsfan" <nepatsfan@xxxxxxxxxxx> kirjoitti
viestissä:bZCdnYyuqaA3tDrenZ2dnUVZ_vydnZ2d@xxxxxxxxxxxxxx
> In O7ZormBBGHA.272@xxxxxxxxxxxxxxxxxxxx Thomas Wendell wrote:
>> Need help again...
>>
>> I understood that XPhome does not have any audit on
>> success/failure in events
>> But now my security log in event viewer just gets filled up
>> with events 515 and 517 (at least, I just emptied it)
>>
>> How to stop it??
>>
>>
>> (On my XPpro the security log has been empty since
>> installing some 2 years ago(and reinstalling 2months ago)
>>
>>
>>
>> --
>> =================================
>> Most learned on these newsgroups
>> Tumppi, Helsinki, FINLAND
>> (translations from/to fi not always accurate
>> =================================
>
> Thomas,
>
> XP Home Edition records a number of different events to the Security log
> by default.
> I believe you'll find entries for the following categories: Account Logon,
> Logon/Logoff, System Events, Policy Change and Privilege Use. I've read
> that you can use a tool from the Windows 2000 Server Resource Kit,
> auditpol.exe, to disable this feature. I've never tried the procedure so I
> cannot comment on how it works. Personally, I can't think of a reason why
> I'd want to disable Security logging. I consider it a useful tool.
>
> As you've noted, auditing of these events has to be enabled on a XP
> Professional system through the Local Security Policy. You're also able to
> audit more events in XP Pro. The Object Access category is one that is
> only available in XP Pro.
>
> If you're looking for more info on a particular Event ID, you might want
> to visit this web site:
>
> Windows Security Log Encyclopedia
> http://www.ultimatewindowssecurity.com/encyclopedia.html
>
> Microsoft provides some information in Appendix E of the XP Resource Kit.
> Click on each section of the appendix to view a description of many of the
> events ID's.
>
> Appendix E Security Event Messages:
> http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/Windows/XP/all/reskit/en-us/prnf_msg_efgd.asp
>
> If none of the above information answers your question, post back with
> more details on exactly what you're trying to have clarified.
>
> Good luck
>
> Nepatsfan
>
>
>


.

Relevant Pages

  • Re: WINS could not start - Problem with logs
    ... The security log is full of Success Audit events ... >> Reading the system log is a problem. ... In management console reading the ... Clicking on the invisible list shows some events are empty ...
    (microsoft.public.backoffice.smallbiz2000)
  • security log is empty in WinXP Pro
    ... I recently installed XP Pro on a system I built and I ... noticed that the security log is completely empty even ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Empty Win2K Server Event Log
    ... I did look via the Event Viewer, but the Security Log is ... > also empty. ... This is totally baffling. ...
    (microsoft.public.exchange2000.admin)
  • Re: Empty Win2K Server Event Log
    ... the event logger is ... If it's completely empty then take a look in the security log to see ... security log making a note of it and if you empty the security log ...
    (microsoft.public.exchange2000.admin)
  • Re: Event viewer/security log
    ... > I understood that XPhome does not have any audit on success/failure in ... > But now my security log in event viewer just gets filled up with events 515 ...
    (microsoft.public.windowsxp.basics)