Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1064
  • Last Modified:

Clearing Remote Security Logs on Multiple Workstations

I manage a small domain run by a Windows 2003 Server with about 35 Windows XP PCs and only a few Windows 2000 machines.  I currently have the domain controller security policy set to allow manual clearing of the security log.  I audit my DC weekly, archive the past week’s security events, and then clear the log.  Unfortunately, logging also occurs on each of the workstations and is only cleared manually by the administrator after logging onto the PC, and subsequently clearing the event log.

Since all of the logging/auditing takes place on the DC, I am not too concerned with the logging on the local PCs.  Is there anyway that I can either run a script, or a utility to clear out the workstation’s security logs weekly with only one or two keystrokes?  Right now, the users contact me when the PCs security log has filled up and they cannot log in.  I am sure that there must be a method by which I can remotely clear the logs when I audit the DC.  If there isn’t a script or utility that can be run, I would be open to any network/system administration packages that contain a feature to remotely clear system logs.

Thanks for any help that you can provide in solving this nuisance.

Bill
0
psuwtb
Asked:
psuwtb
1 Solution
 
chadCommented:
you can have it done without any intervention weekly.
right click the log on the local machine... select properties.
choose...overwrite events over 7 days old.  or if it is all sent to the DC... set it to one day.
then set a size limit lower
hth
0
 
psuwtbAuthor Commented:
kabaam--

Thanks, I just went through the AD and changed all 35+ of the Event Log settings.  I'm going to take your word that this will work, since I don't really want to fully test filling up the log.  Thanks again!

Bill
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now