Guest Daniel P. Cayea Posted October 2, 2007 Posted October 2, 2007 I have this peculiar problem with my security log on my domain controller. I've set up my security log to overwrite events as needed, but the size is large enough that it will not overwrite events unless they are like two weeks plus old. Problem is, every time I log onto my server I get the "Security Log is full" message. I go into the event viewer and change the atributes of the log, and it gets set back to "Do not overwrite". I remember a while back there was a hotfix to fix this, can anyone remember it or help me with this issue? Thanks Dan
Guest Anthony Posted October 2, 2007 Posted October 2, 2007 Re: Security Log Question & Hotfix? Daniel, Is this the one you were looking for? http://support.microsoft.com/kb/312571 Or are the properties being set in Group Policy perhaps? Anthony, http://www.airdesk.co.uk "Daniel P. Cayea" <DanielPCayea@discussions.microsoft.com> wrote in message news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... >I have this peculiar problem with my security log on my domain controller. > I've set up my security log to overwrite events as needed, but the size is > large enough that it will not overwrite events unless they are like two > weeks > plus old. Problem is, every time I log onto my server I get the "Security > Log is full" message. I go into the event viewer and change the atributes > of > the log, and it gets set back to "Do not overwrite". > > I remember a while back there was a hotfix to fix this, can anyone > remember > it or help me with this issue? > > Thanks > Dan
Guest Daniel P. Cayea Posted October 2, 2007 Posted October 2, 2007 Re: Security Log Question & Hotfix? Hi Anthony Thanks for the reply, but that wasn't the hotfix. I may have to open up a new incident with Microsoft to fix it. -Dan "Anthony" wrote: > Daniel, > Is this the one you were looking for? http://support.microsoft.com/kb/312571 > Or are the properties being set in Group Policy perhaps? > Anthony, http://www.airdesk.co.uk > > > "Daniel P. Cayea" <DanielPCayea@discussions.microsoft.com> wrote in message > news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... > >I have this peculiar problem with my security log on my domain controller. > > I've set up my security log to overwrite events as needed, but the size is > > large enough that it will not overwrite events unless they are like two > > weeks > > plus old. Problem is, every time I log onto my server I get the "Security > > Log is full" message. I go into the event viewer and change the atributes > > of > > the log, and it gets set back to "Do not overwrite". > > > > I remember a while back there was a hotfix to fix this, can anyone > > remember > > it or help me with this issue? > > > > Thanks > > Dan > > >
Guest timjsimon@yahoo.com Posted October 16, 2007 Posted October 16, 2007 Re: Security Log Question & Hotfix? On Oct 2, 7:55 am, Daniel P. Cayea <DanielPCa...@discussions.microsoft.com> wrote: > Hi Anthony > > Thanks for the reply, but that wasn't the hotfix. I may have to open up a > new incident with Microsoft to fix it. > > -Dan > > "Anthony" wrote: > > Daniel, > > Is this the one you were looking for?http://support.microsoft.com/kb/312571 > > Or are the properties being set in Group Policy perhaps? > > Anthony,http://www.airdesk.co.uk > > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in message > >news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... > > >I have this peculiar problem with mysecuritylogon my domain controller. > > > I've set up mysecuritylogto overwrite events as needed, but the size is > > > large enough that it will not overwrite events unless they are like two > > > weeks > > > plus old. Problem is, every time Ilogonto my server I get the "Security > > >Logisfull" message. I go into the event viewer and change the atributes > > > of > > > thelog, and it gets set back to "Do not overwrite". > > > > I remember a while back there was a hotfix to fix this, can anyone > > > remember > > > it or help me with this issue? > > > > Thanks > > > Dan Hi Dan Did you get any resolution to this? I'm having exactly the same problem, on multiple Windows 2003 servers. Thanks Tim
Guest Daniel P. Cayea Posted October 16, 2007 Posted October 16, 2007 Re: Security Log Question & Hotfix? No, no resolution as of yet, but I still need to contact Microsoft to get a fix on it. -Dan "timjsimon@yahoo.com" wrote: > On Oct 2, 7:55 am, Daniel P. Cayea > <DanielPCa...@discussions.microsoft.com> wrote: > > Hi Anthony > > > > Thanks for the reply, but that wasn't the hotfix. I may have to open up a > > new incident with Microsoft to fix it. > > > > -Dan > > > > "Anthony" wrote: > > > Daniel, > > > Is this the one you were looking for?http://support.microsoft.com/kb/312571 > > > Or are the properties being set in Group Policy perhaps? > > > Anthony,http://www.airdesk.co.uk > > > > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in message > > >news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... > > > >I have this peculiar problem with mysecuritylogon my domain controller. > > > > I've set up mysecuritylogto overwrite events as needed, but the size is > > > > large enough that it will not overwrite events unless they are like two > > > > weeks > > > > plus old. Problem is, every time Ilogonto my server I get the "Security > > > >Logisfull" message. I go into the event viewer and change the atributes > > > > of > > > > thelog, and it gets set back to "Do not overwrite". > > > > > > I remember a while back there was a hotfix to fix this, can anyone > > > > remember > > > > it or help me with this issue? > > > > > > Thanks > > > > Dan > > Hi Dan > > Did you get any resolution to this? I'm having exactly the same > problem, on multiple Windows 2003 servers. > > Thanks > > Tim > >
Guest Anthony Posted October 16, 2007 Posted October 16, 2007 Re: Security Log Question & Hotfix? Are you sure its not just a GPO writing the settings for the log? What events is the log filling up with? Anthony, http://www.airdesk.co.uk "Daniel P. Cayea" <DanielPCayea@discussions.microsoft.com> wrote in message news:1E88BC98-68F9-4314-9281-A43697262A76@microsoft.com... > No, no resolution as of yet, but I still need to contact Microsoft to get > a > fix on it. > > -Dan > > "timjsimon@yahoo.com" wrote: > >> On Oct 2, 7:55 am, Daniel P. Cayea >> <DanielPCa...@discussions.microsoft.com> wrote: >> > Hi Anthony >> > >> > Thanks for the reply, but that wasn't the hotfix. I may have to open >> > up a >> > new incident with Microsoft to fix it. >> > >> > -Dan >> > >> > "Anthony" wrote: >> > > Daniel, >> > > Is this the one you were looking >> > > for?http://support.microsoft.com/kb/312571 >> > > Or are the properties being set in Group Policy perhaps? >> > > Anthony,http://www.airdesk.co.uk >> > >> > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in >> > > message >> > >news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... >> > > >I have this peculiar problem with mysecuritylogon my domain >> > > >controller. >> > > > I've set up mysecuritylogto overwrite events as needed, but the >> > > > size is >> > > > large enough that it will not overwrite events unless they are like >> > > > two >> > > > weeks >> > > > plus old. Problem is, every time Ilogonto my server I get the >> > > > "Security >> > > >Logisfull" message. I go into the event viewer and change the >> > > >atributes >> > > > of >> > > > thelog, and it gets set back to "Do not overwrite". >> > >> > > > I remember a while back there was a hotfix to fix this, can anyone >> > > > remember >> > > > it or help me with this issue? >> > >> > > > Thanks >> > > > Dan >> >> Hi Dan >> >> Did you get any resolution to this? I'm having exactly the same >> problem, on multiple Windows 2003 servers. >> >> Thanks >> >> Tim >> >>
Guest timjsimon@yahoo.com Posted October 22, 2007 Posted October 22, 2007 Re: Security Log Question & Hotfix? On Oct 16, 9:05 am, "Anthony" <anthony.s...@spammedout.com> wrote: > Are you sure its not just a GPO writing the settings for thelog? > What events is thelogfilling up with? > Anthony,http://www.airdesk.co.uk > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in messagenews:1E88BC98-68F9-4314-9281-A43697262A76@microsoft.com... > > > No, no resolution as of yet, but I still need to contact Microsoft to get > > a > > fix on it. > > > -Dan > > > "timjsi...@yahoo.com" wrote: > > >> On Oct 2, 7:55 am, Daniel P. Cayea > >> <DanielPCa...@discussions.microsoft.com> wrote: > >> > Hi Anthony > > >> > Thanks for the reply, but that wasn't the hotfix. I may have to open > >> > up a > >> > new incident with Microsoft to fix it. > > >> > -Dan > > >> > "Anthony" wrote: > >> > > Daniel, > >> > > Is this the one you were looking > >> > > for?http://support.microsoft.com/kb/312571 > >> > > Or are the properties being set in Group Policy perhaps? > >> > > Anthony,http://www.airdesk.co.uk > > >> > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in > >> > > message > >> > >news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... > >> > > >I have this peculiar problem with mysecuritylogon my domain > >> > > >controller. > >> > > > I've set up mysecuritylogto overwrite events as needed, but the > >> > > > size is > >> > > > large enough that it will not overwrite events unless they are like > >> > > > two > >> > > > weeks > >> > > > plus old. Problem is, every time Ilogonto my server I get the > >> > > > "Security > >> > > >Logisfull" message. I go into the event viewer and change the > >> > > >atributes > >> > > > of > >> > > > thelog, and it gets set back to "Do not overwrite". > > >> > > > I remember a while back there was a hotfix to fix this, can anyone > >> > > > remember > >> > > > it or help me with this issue? > > >> > > > Thanks > >> > > > Dan > > >> Hi Dan > > >> Did you get any resolution to this? I'm having exactly the same > >> problem, on multiple Windows 2003 servers. > > >> Thanks > > >> Tim All of my Group Policy Objects for Event Viewer are "not defined" .....
Guest timjsimon@yahoo.com Posted October 22, 2007 Posted October 22, 2007 Re: Security Log Question & Hotfix? On Oct 22, 9:53 am, timjsi...@yahoo.com wrote: > On Oct 16, 9:05 am, "Anthony" <anthony.s...@spammedout.com> wrote: > > > > > Are you sure its not just a GPO writing the settings for thelog? > > What events is thelogfilling up with? > > Anthony,http://www.airdesk.co.uk > > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in messagenews:1E88BC98-68F9-4314-9281-A43697262A76@microsoft.com... > > > > No, no resolution as of yet, but I still need to contact Microsoft to get > > > a > > > fix on it. > > > > -Dan > > > > "timjsi...@yahoo.com" wrote: > > > >> On Oct 2, 7:55 am, Daniel P. Cayea > > >> <DanielPCa...@discussions.microsoft.com> wrote: > > >> > Hi Anthony > > > >> > Thanks for the reply, but that wasn't the hotfix. I may have to open > > >> > up a > > >> > new incident with Microsoft to fix it. > > > >> > -Dan > > > >> > "Anthony" wrote: > > >> > > Daniel, > > >> > > Is this the one you were looking > > >> > > for?http://support.microsoft.com/kb/312571 > > >> > > Or are the properties being set in Group Policy perhaps? > > >> > > Anthony,http://www.airdesk.co.uk > > > >> > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in > > >> > > message > > >> > >news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... > > >> > > >I have this peculiar problem with mysecuritylogon my domain > > >> > > >controller. > > >> > > > I've set up mysecuritylogto overwrite events as needed, but the > > >> > > > size is > > >> > > > large enough that it will not overwrite events unless they are like > > >> > > > two > > >> > > > weeks > > >> > > > plus old. Problem is, every time Ilogonto my server I get the > > >> > > > "Security > > >> > > >Logisfull" message. I go into the event viewer and change the > > >> > > >atributes > > >> > > > of > > >> > > > thelog, and it gets set back to "Do not overwrite". > > > >> > > > I remember a while back there was a hotfix to fix this, can anyone > > >> > > > remember > > >> > > > it or help me with this issue? > > > >> > > > Thanks > > >> > > > Dan > > > >> Hi Dan > > > >> Did you get any resolution to this? I'm having exactly the same > > >> problem, on multiple Windows 2003 servers. > > > >> Thanks > > > >> Tim > > All of my Group Policy Objects for Event Viewer are "not defined" ..... Anthony - you were right! I did a little more digging into the Group Policies and found it. Thanks for pointing me in the right direction, this has been making me nuts for quite a while.
Guest Anthony Posted October 22, 2007 Posted October 22, 2007 Re: Security Log Question & Hotfix? Glad to hear it! Anthony, http://www.airdesk.com <timjsimon@yahoo.com> wrote in message news:1193076150.541043.160480@e34g2000pro.googlegroups.com... > On Oct 22, 9:53 am, timjsi...@yahoo.com wrote: >> On Oct 16, 9:05 am, "Anthony" <anthony.s...@spammedout.com> wrote: >> >> >> >> > Are you sure its not just a GPO writing the settings for thelog? >> > What events is thelogfilling up with? >> > Anthony,http://www.airdesk.co.uk >> >> > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in >> > messagenews:1E88BC98-68F9-4314-9281-A43697262A76@microsoft.com... >> >> > > No, no resolution as of yet, but I still need to contact Microsoft to >> > > get >> > > a >> > > fix on it. >> >> > > -Dan >> >> > > "timjsi...@yahoo.com" wrote: >> >> > >> On Oct 2, 7:55 am, Daniel P. Cayea >> > >> <DanielPCa...@discussions.microsoft.com> wrote: >> > >> > Hi Anthony >> >> > >> > Thanks for the reply, but that wasn't the hotfix. I may have to >> > >> > open >> > >> > up a >> > >> > new incident with Microsoft to fix it. >> >> > >> > -Dan >> >> > >> > "Anthony" wrote: >> > >> > > Daniel, >> > >> > > Is this the one you were looking >> > >> > > for?http://support.microsoft.com/kb/312571 >> > >> > > Or are the properties being set in Group Policy perhaps? >> > >> > > Anthony,http://www.airdesk.co.uk >> >> > >> > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote >> > >> > > in >> > >> > > message >> > >> > >news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... >> > >> > > >I have this peculiar problem with mysecuritylogon my domain >> > >> > > >controller. >> > >> > > > I've set up mysecuritylogto overwrite events as needed, but >> > >> > > > the >> > >> > > > size is >> > >> > > > large enough that it will not overwrite events unless they are >> > >> > > > like >> > >> > > > two >> > >> > > > weeks >> > >> > > > plus old. Problem is, every time Ilogonto my server I get the >> > >> > > > "Security >> > >> > > >Logisfull" message. I go into the event viewer and change the >> > >> > > >atributes >> > >> > > > of >> > >> > > > thelog, and it gets set back to "Do not overwrite". >> >> > >> > > > I remember a while back there was a hotfix to fix this, can >> > >> > > > anyone >> > >> > > > remember >> > >> > > > it or help me with this issue? >> >> > >> > > > Thanks >> > >> > > > Dan >> >> > >> Hi Dan >> >> > >> Did you get any resolution to this? I'm having exactly the same >> > >> problem, on multiple Windows 2003 servers. >> >> > >> Thanks >> >> > >> Tim >> >> All of my Group Policy Objects for Event Viewer are "not defined" ..... > > Anthony - you were right! I did a little more digging into the Group > Policies and found it. > > Thanks for pointing me in the right direction, this has been making me > nuts for quite a while. >
Guest Daniel P. Cayea Posted January 18, 2008 Posted January 18, 2008 Re: Security Log Question & Hotfix? Hi Do you remember where in GP the settings were you were looking for that fixed it? Thanks Dan "timjsimon@yahoo.com" wrote: > On Oct 22, 9:53 am, timjsi...@yahoo.com wrote: > > On Oct 16, 9:05 am, "Anthony" <anthony.s...@spammedout.com> wrote: > > > > > > > > > Are you sure its not just a GPO writing the settings for thelog? > > > What events is thelogfilling up with? > > > Anthony,http://www.airdesk.co.uk > > > > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in messagenews:1E88BC98-68F9-4314-9281-A43697262A76@microsoft.com... > > > > > > No, no resolution as of yet, but I still need to contact Microsoft to get > > > > a > > > > fix on it. > > > > > > -Dan > > > > > > "timjsi...@yahoo.com" wrote: > > > > > >> On Oct 2, 7:55 am, Daniel P. Cayea > > > >> <DanielPCa...@discussions.microsoft.com> wrote: > > > >> > Hi Anthony > > > > > >> > Thanks for the reply, but that wasn't the hotfix. I may have to open > > > >> > up a > > > >> > new incident with Microsoft to fix it. > > > > > >> > -Dan > > > > > >> > "Anthony" wrote: > > > >> > > Daniel, > > > >> > > Is this the one you were looking > > > >> > > for?http://support.microsoft.com/kb/312571 > > > >> > > Or are the properties being set in Group Policy perhaps? > > > >> > > Anthony,http://www.airdesk.co.uk > > > > > >> > > "Daniel P. Cayea" <DanielPCa...@discussions.microsoft.com> wrote in > > > >> > > message > > > >> > >news:984EC0C7-FB43-4DA4-AA54-955CEA1B93D4@microsoft.com... > > > >> > > >I have this peculiar problem with mysecuritylogon my domain > > > >> > > >controller. > > > >> > > > I've set up mysecuritylogto overwrite events as needed, but the > > > >> > > > size is > > > >> > > > large enough that it will not overwrite events unless they are like > > > >> > > > two > > > >> > > > weeks > > > >> > > > plus old. Problem is, every time Ilogonto my server I get the > > > >> > > > "Security > > > >> > > >Logisfull" message. I go into the event viewer and change the > > > >> > > >atributes > > > >> > > > of > > > >> > > > thelog, and it gets set back to "Do not overwrite". > > > > > >> > > > I remember a while back there was a hotfix to fix this, can anyone > > > >> > > > remember > > > >> > > > it or help me with this issue? > > > > > >> > > > Thanks > > > >> > > > Dan > > > > > >> Hi Dan > > > > > >> Did you get any resolution to this? I'm having exactly the same > > > >> problem, on multiple Windows 2003 servers. > > > > > >> Thanks > > > > > >> Tim > > > > All of my Group Policy Objects for Event Viewer are "not defined" ..... > > Anthony - you were right! I did a little more digging into the Group > Policies and found it. > > Thanks for pointing me in the right direction, this has been making me > nuts for quite a while. > >
Recommended Posts