Re: Non stop event id

Hello DD,

Check your domain controllers policy for Auditing configuration:

Audit logon events: 538 unsuccesfull logon 540 succesfull logon

576 audit privilege use

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

One fo the DC (2003) keep generating event id 538, 540 & 576. This
caused the security event log full in 3 minutes .

Any way to check which service keep generating the 3 events ?



.

Relevant Pages

  • Re: login and logout times - XP Home Edition
    ... > more of capabilities within XP itself. ... I don't know if XP Home allows for it, but in Windows XP Pro you can set ... up Audit policies to audit logon events so you can know when a user has ... utility to limit the authorized logon hours for a user. ...
    (microsoft.public.windowsxp.security_admin)
  • Tracking logons
    ... a way that I can either pull the info from the eventvwr or using a logon ... Audit Logon Events and Audit Account Logon Events are both set to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Event 2510 appears every 12 minutes in Server 2003 DC system l
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... "Meinolf Weber" wrote: ... Succesful Network Logon: ...
    (microsoft.public.windows.server.general)
  • Re: Event 2510 appears every 12 minutes in Server 2003 DC system l
    ... To prevent this you could save the profiles on the server. ... Best regards ... "Meinolf Weber" wrote: ... Succesful Network Logon: ...
    (microsoft.public.windows.server.general)
  • Re: Event 2510 appears every 12 minutes in Server 2003 DC system l
    ... "Meinolf Weber" wrote: ... Remove the workstation with the problem from the domain to workgroup, ... Is that client a domain member? ... Succesful Network Logon: ...
    (microsoft.public.windows.server.general)