RE: security auditing under windows 2000 server

From: Corey Snow (Corey.Snow_at_us.logical.com)
Date: 06/26/03

  • Next message: Majwabu, Richard: "RE: Windows NLB" 
    Date: Thu, 26 Jun 2003 13:49:49 -0500
To: <FOCUS-MS@securityfocus.com>

    > I've just configured a domain policy which requires full
    > system auditing, but ever since this has been configured we
    > have been seeing issues whereby the system is unable to write
    > to the audit log and blue screens. I really need some help in
    > understanding what would cause this logging issue and what
    > can be done to alleviate it.
    >

    You want to be sure that if you do something like this, you keep the log
    file size to a reasonable size, because you could fill up the hard drive
    the logs are stored on, causing various problems including a crash.

    It's also a good idea to have your logs roll over, because if the
    security log fills, the system will stop functioning properly until an
    administrator clears out some log entries and resets the system.

    Corey Snow

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

  • Next message: Majwabu, Richard: "RE: Windows NLB"