Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Clearing Remote Security Logs on Multiple Workstations

Posted on 2004-04-15
2
Medium Priority
?
1,062 Views
Last Modified: 2013-12-04
I manage a small domain run by a Windows 2003 Server with about 35 Windows XP PCs and only a few Windows 2000 machines.  I currently have the domain controller security policy set to allow manual clearing of the security log.  I audit my DC weekly, archive the past week’s security events, and then clear the log.  Unfortunately, logging also occurs on each of the workstations and is only cleared manually by the administrator after logging onto the PC, and subsequently clearing the event log.

Since all of the logging/auditing takes place on the DC, I am not too concerned with the logging on the local PCs.  Is there anyway that I can either run a script, or a utility to clear out the workstation’s security logs weekly with only one or two keystrokes?  Right now, the users contact me when the PCs security log has filled up and they cannot log in.  I am sure that there must be a method by which I can remotely clear the logs when I audit the DC.  If there isn’t a script or utility that can be run, I would be open to any network/system administration packages that contain a feature to remotely clear system logs.

Thanks for any help that you can provide in solving this nuisance.

Bill
0
Comment
Question by:psuwtb
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 11

Accepted Solution

by:
kabaam earned 400 total points
ID: 10833500
you can have it done without any intervention weekly.
right click the log on the local machine... select properties.
choose...overwrite events over 7 days old.  or if it is all sent to the DC... set it to one day.
then set a size limit lower
hth
0
 

Author Comment

by:psuwtb
ID: 10833736
kabaam--

Thanks, I just went through the AD and changed all 35+ of the Event Log settings.  I'm going to take your word that this will work, since I don't really want to fully test filling up the log.  Thanks again!

Bill
0

Featured Post

Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question