Re: Security Logs Full

Ernest,

This setting can be controlled via group policy.

Kind Regards,

--
Colin M. McGroarty
MCSE (NT 4.0, 2000, 2003), MCSA: Messaging (2000, 2003), MCP+I, NT-CIP
2004 Microsoft MVP - Windows Server
www.McGroarty.org


"Ernest" <Ernest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:CB83674E-016D-43F9-9EBD-A016777D412C@xxxxxxxxxxxxxxxx
I made some changes to include more information in my security logs in my
domain controllers. I also increased the size of the logs. This morning,
several users could not log on and were receiving the error message that the
security logs were full on the local machine. I cleared them out and set the
local logs to over write as necessary. What I would like to know is what
caused this and what can I do to prevent future logon problems? Thanks!


.

Relevant Pages

  • Re: Re: Account locking out
    ... > lockout events ID's that it may show the user account name and ... > account management enabled in Domain Controller Security ... > logs for specific event ID's. ... > logging on your domain controllers starting with the pdc fsmo. ...
    (microsoft.public.win2000.security)
  • Re: Event ID: 2114 Topology Discovery failed.
    ... Front End Exchange 2003 with SP1. ... Going through our logs, this started happening after a reboot last ... Prior to that reboot, ...
    (microsoft.public.exchange.admin)
  • Re: Network connectivity at startup
    ... >> controllers. ... When the workstation is started and user starts to logon as ... >> domain/network associated functions fail. ... >> run for a few minutes after the logon screen appears and then logs on, ...
    (microsoft.public.windowsxp.network_web)
  • Event Logs
    ... I am see a problem with the event viewer on my domain ... controllers. ... logs I get this message. ... Im login with the administrator account. ...
    (microsoft.public.windows.server.general)
  • Re: Is there a way to identify all of a users logins?
    ... If a user logs into a local machine with one username & password, ... You can use domain credentials to do that but all it means is that ...
    (microsoft.public.win32.programmer.networks)