Re: getting security records from event viewer

what do you set your max log size at (for a desktop pc or gpo for desktop pcs)?


"Shenan Stanley" wrote:

biff wrote:
I need to gain access to logon/logoff records for a particular
computer for the last couple of months.

Hoever, it seems that the default setting is to overwrite events
older than 7 days. Is there no way to get access to logon/logoff
records if not shown in the event log?

Not if they have been overwritten.
Sounds like you had your settings wrong for what you might need (or need
now.)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



.

Relevant Pages

  • Re: getting security records from event viewer
    ... biff wrote: ... Hoever, it seems that the default setting is to overwrite events ... Shenan Stanley ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Working remotely with two PCs without real IPs
    ... What software you suggest I use to have these two PCs connect to ... Shenan Stanley wrote: ... Routers can be configured to forward certain ports to certain ... machines behind them and thus - allowing Remote Desktop, ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Remote Desktop for Dual-screen
    ... Rubiny wrote: ... Does RDP support access from 2 PCs? ... Shenan Stanley ...
    (microsoft.public.windowsxp.help_and_support)
Quantcast