Windows Security Logs
-
Thursday, February 23, 2012 4:01 PMI have a total of 6 domain controllers all running Windows 2008 R2 running in my network. The domain is at 2008 R2 domain level. We keep having an issue where the Security Logs are filling up the drives. We manually delete them, change the setting to overwrite oldest events. As soon as we close it, it goes back to archive events. System and Application logs stay to the overwrite. Is there a setting in 2008 that prevents you from changing that, kind of like a high security setting or something?
All Replies
-
Saturday, February 25, 2012 6:31 PM
These ones may help.
http://technet.microsoft.com/en-us/library/dd408940(v=ws.10).aspx
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]- Marked As Answer by Cheers ZHANGMicrosoft Contingent Staff, Moderator Monday, February 27, 2012 2:33 AM
-
Monday, February 27, 2012 2:52 PMThe first article did it. We were still doing GP using the \Policies\Windows Settings\Security Settings\Event Logs instead of \Administrative Templates\Windows Components\Event Log Service. The old location works fine still with everything except Security logs. Thanks
-
Monday, February 27, 2012 2:55 PM
Good to hear this helped.
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
.png)
