Re: W2K3 Bug? - EventLog Size using policy?

From: Glenn L (the.only(delete)_at_gmail)
Date: 02/02/05 

Date: Tue, 1 Feb 2005 22:14:24 -0800

I am seeing this behavior too (on W2K3). I agree, this is likely a code
defect.
If you set a policy to increase the size of the event log, it will work.
But a policy will not decrease it.
You always get a warning when you decrease the size manually indicating the
setting will not take effect until the log is cleared. Even if you clear
all the events before and after, the policy still will not decrease the log
size.
I turned up winlogon debug logging, and it indicates it is applying the
policy the same whether increasing it or decreasing it.
But the maxsize registry value does not change when the policy attempts to
decrease it.

This one will require a case with MS to resolve. 

-- 
Glenn L
CCNA, MCSE 2000/2003 + Security
"Juan" <Juan@discussions.microsoft.com> wrote in message 
news:A0D68C60-33E2-4DC4-A3E2-1040D8390986@microsoft.com...
> Hi!
>
> I've created a GPO for all our DCs which specifies the event log size to 
> 16
> MB. I linked the GPO and specified the order so that it should work.
> When I ran Group Policy Results (part of gpmc.msc) it shows me that
> everything should work properly and that the winning gpo ist the one in 
> which
> the settings are specified.
>
> But it doesn't work! Some DCs have log files over 50 MB. And if I check 
> the
> settings in the Event Logs I see that the size is specified to 130 MB or
> other values I never specified.
>
> I don't have use the default domain controllers gpo because I want to let
> the default policies as they are.
>
> Any ideas?
>
>
> Thanks in advanced
>
>
> Juan

Relevant Pages

  • Re: W2K3 Bug? - EventLog Size using policy?
    ... > If you set a policy to increase the size of the event log, ... > But a policy will not decrease it. ... >> I've created a GPO for all our DCs which specifies the event log size to ... I linked the GPO and specified the order so that it should work. ...
    (microsoft.public.windows.group_policy)
  • Re: Default Domain Controller Policy being overwritten
    ... I do have the event log size defined. ... the log file and filling up in a few days. ... It's almost like I change the policy on the ... >> errors relating to this in the event logs on either domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GP NOt Working on One XP Workstation
    ... You probably need to enable logging and try to find any ... possibly related messages in the event log of that machine. ... XP that walks you through enabling logging by policy ...
    (microsoft.public.windows.group_policy)
  • Re: Folder Redirection
    ... You can use the command line tool gpresult to ensure the policy is applied ... to the particular user and machine, The event log should report en error if ... folder redirection fails, if the is no events its possible never applied. ...
    (microsoft.public.win2000.active_directory)
  • Re: Event 643 in Security log every 5 minutes
    ... Group/security policy is refreshed every five minutes on a domain ... > In the event log of the First DC, ... > the network should have a user right more than an ordinary domain user. ... > controller. ...
    (microsoft.public.win2000.security)