Re: Security Log filling with Audit Events

From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (sbradcpa_at_pacbell.net)
Date: 03/03/04 

Date: Tue, 02 Mar 2004 19:16:24 -0800

I'd be checking out switches IMHO.

Jamie wrote:

> Anyone know why I get so many Audit Success events in my
> SBS2003 Security log? It seems as if its constantly
> auditig the workstations and creates a event every few
> seconds.
>
> On another note I'm having a problem with a few XP
> machines that get kicked off the network somewhere between
> 5:30 and 6:30 on a nightly basis, and it's not the same
> machines at the same time. If I check the security log
> when they get kicked off I see Audit failures and then an
> Audit success. It seems to alternate between the two for
> about 10 mins then the users work fine. It's very strange.
> I have some XP workstations that this has never happened
> to and others that it happens every night. All of my users
> (20) belong to the same group and all have the same rights.
>
> Any ideas??????
> 

-- 
http://www.sbslinks.com/really.htm

Relevant Pages

  • Audit failure
    ... I'm having a problem with different workstations getting ... in the security log that the user whos getting ... disconnected is producing audit failures. ...
    (microsoft.public.windows.server.sbs)
  • Re: securirty differences Win 2K and Win XP
    ... well - the basic security log didn't show what user was used to access the ... page or the XML file. ... > | When the ASPX file executes to run the Transformation for the treeview - ... > |> Are both workstations are part of the same domain? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Workstation Security Logs filling Up
    ... It is also worth checking the ... Group policy is set to require the security log of a workstation to ... On some of these workstations the log is filling up almost daily. ...
    (microsoft.public.win2000.group_policy)
  • How can I log user logon/logoff time only on domain controller or workstations running windows 2000
    ... I am an admin of a LAN with Windows 2000 server sp3 as the domain ... The current security log on the domain controller records ... all workstations every few minutes. ...
    (microsoft.public.win2000.security)
  • Workstation Security Logs filling Up
    ... Running Windows 2003 servers as domain controllers, all workstations are ... Group policy is set to require the security log of a workstation to ... overwrite when it reaches the alloted size. ...
    (microsoft.public.win2000.group_policy)