Re: Event Log losing settings
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx>
- Date: Mon, 18 Apr 2005 23:33:28 -0500
The Event Log configuration is computer configuration - not user
configuration. It would need to be applied to the computers either at the
domain or OU level. You also can disable the setting that is locking out
users when the security log becomes full. Usually you only enable that on
very sensitive computers where you have a particular security reason to
configure it and is not normally used on all computers in a domain. It is a
security option and can be configured in the appropriate security policy as
the local/domain/OU level. Look under security settings/local
policies/security options for the option audit:shut down immediately if
unable to log security audits and set it to disabled. You can use the
Resultant Set of Policy mmc snapin on the domain controller to see exactly
what Group Policy settings are being applied to a user or computer. ---
Steve
"MM" <michmill1973@xxxxxxxxxxxx> wrote in message
news:751763ee.0504181732.46fb9095@xxxxxxxxxxxxxxxxxxxxx
> Environment:
> Windows 2003 Small Business Server (DC)
> Windows 2003 Server Std with Citrix Metaframe XPs FR3 SP4
> Clients - Win XP SP2
>
> I have an annoying little problem with the security event log on the
> clients. In the group policy for the bulk of the users in the OU
> "Users - Shell" I have set the security log size to 9984kb and to
> overwrite events as necessary, but these settings are not working on
> the clients. Many users get locked out from the PC as the security log
> fills up and requires an admin to log in and clear it (users are not
> local admins). I have checked through all other GPOs to make sure
> there aren't any conflicts. I have also tried setting the same
> settings on the client. It all appears OK - I change the settings, go
> out of the properties window, go back and check it has retained the
> settings and everything is fine. Then I can go back a couple of days
> later and it has reset to clear events manually.
>
> Can anyone shed some light on why this GPO isn't working as expected?
> Any ideas will be greatly appreicated as this is driving my users
> nuts!
>
> Thanks
>
> Michelle
.
- Follow-Ups:
- Re: Event Log losing settings
- From: michmill1973
- Re: Event Log losing settings
- From: michmill1973
- Re: Event Log losing settings
- References:
- Event Log losing settings
- From: MM
- Event Log losing settings
- Prev by Date: Re: Auto shutdown workstations
- Next by Date: Re: Open specific XP firewall ports using GPO?
- Previous by thread: Event Log losing settings
- Next by thread: Re: Event Log losing settings
- Index(es):
Relevant Pages
|
