Re: Security Log Question & Hotfix?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Daniel,
Is this the one you were looking for? http://support.microsoft.com/kb/312571
Or are the properties being set in Group Policy perhaps?
Anthony, http://www.airdesk.co.uk


"Daniel P. Cayea" <DanielPCayea@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@xxxxxxxxxxxxxxxx
I have this peculiar problem with my security log on my domain controller.
I've set up my security log to overwrite events as needed, but the size is
large enough that it will not overwrite events unless they are like two
weeks
plus old. Problem is, every time I log onto my server I get the "Security
Log is full" message. I go into the event viewer and change the atributes
of
the log, and it gets set back to "Do not overwrite".

I remember a while back there was a hotfix to fix this, can anyone
remember
it or help me with this issue?

Thanks
Dan


.

Relevant Pages

  • RE: Security Log and Group Policy
    ... Anthony, you will need to open your group policy editor. ... Configuration -> Windows Settings -> Security Settings then click on Event ... Change the retention method for security log to overwrite as needed. ...
    (microsoft.public.win2000.group_policy)
  • Event Log Settings
    ... In Group Policy, I have these defined: ... So what happens if the security log grows to be 8200kb but is more than ... while 'Overwrite events older than 7 days' only ... applied if 'Retention method for security logs' is set to 'Overwrite ...
    (microsoft.public.security)
  • Re: SECURITY LOG IS FULL MESSAGE
    ... >> Rume; ... Clearing the>> log is one way to free the log and start recording new events]]>> ... To overwrite events, on the Action menu,>> click Properties, and then click Overwrite events as needed. ... Sometimes they receive the following>>> message when they try to logon: Security log is full>>> contact your System Administrator. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Event Viewer stopped logging security audit
    ... of when "maximum log size is reached" in the properties of the security log. ... The options are - overwrite events as needed, ... > event viewer in the section Security. ... I checked the auditing event to see ...
    (microsoft.public.win2000.security)
  • Re: securing the event log
    ... There is a user right assignment for managing auditing and security log that would ... Also check ntfs permissions on the .evt files ... it could also be configured as restricted in Group Policy ... > find any reference to locking out the event log. ...
    (microsoft.public.windowsxp.security_admin)