Re: Security Logs

From: Richard Ling (Richard.Ling_at_xyz.com)
Date: 07/30/03


Date: Wed, 30 Jul 2003 17:48:00 +0100


Jason

They are all logon/logoff but the majority of them are system and not users.
This seems to be what is filling up the logs so quickly

Any advice apreciated

Thanks

Richard

"JasonW" <no@no.com> wrote in message
news:04SVa.20858$YN5.19762@sccrnsc01...
Are all the events logon/logoff? If so, are they all your known users?

-JasonW

"Richard Ling" <Richard.Ling@xyz.com> wrote in message
news:#KmKqnpVDHA.1316@TK2MSFTNGP12.phx.gbl...
> I have enable auding on my Windows 2000 server (SBS 2000) for Logon/Logoff
> event so that I can audit who is logging on and off the domain. I have
done
> this by setting the security settings in Domain Controller Security
Policy.
>
> The security log has hundreds of event (mainly system) and is filling up
the
> log very quickly. I was suprised about this as I only have 10 users. I
> have increased the log size to 4mb but is still full within a day or two.
>
> Can anyone suggest how I can control this so the log does not fill so
> quickly
>
> Thanks
>
>
> Richard
>
>
>



Relevant Pages

  • Re: RealBook Software
    ... to get a new one by filling out a form. ... security is positively arcane and inconvenient. ...
    (rec.music.makers.guitar.jazz)
  • Re: RealBook Software
    ... new one by filling out a form. ...  This guy's sense of security is positively ... arcane and inconvenient. ...
    (rec.music.makers.guitar.jazz)
  • Re: Security log in Event Viewer
    ... 08:00:15, Success Audit, Logon/logoff, Event 576 ... >> keeps loggin on and off all the time, filling up the security log in the ... >> Best regards ...
    (microsoft.public.windows.server.sbs)
  • Re: NT AUTHORITYSYSTEM
    ... > Event Source: Security ... > Event Category: Logon/Logoff ... Looking for spyware or any other maliciuos program on your server and on ... Security Manager ...
    (microsoft.public.windows.server.general)
  • Re: User Logging
    ... open it and on the view menu click filter and select security - logon/logoff ... > and time out of users accounts on my computer under their ...
    (microsoft.public.windowsxp.security_admin)