• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 253
  • Last Modified:

W2k event view question

Hi there
W2000 server,domain controler.evrything works fine but Security event log.shows only event 517(last time I cleared the same 517 log,doesn't generate any event anymore)...
Any ideas
  • 3
2 Solutions
Gareth GudgerCommented:
The security log typically doesnt generate anything unless you turn auditing on.
Peter1111Author Commented:
Yes auditing is on.
Event ID 517 only occurs when someone clears the Security Event log.

When you say doesn't generate any events, do you mean all events or just 517?  If its not logging any events at all, have you tried deleting the log file itself and recreating it?

Default location: \WINNT\System32\config\SecEvent.Evt
Peter1111Author Commented:
It's not loging any events at all.I have not tried deleting the log file.I have to wait till monday
Peter1111Author Commented:
Hi there.I got it. Domain Controler Policy Auditing was on, but Local wasn't. I checked "No Override" under Default Domain Controler Policy Options and so far so good.Thanks again
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Train for your Pen Testing Engineer Certification

Enroll today in this bundle of courses to gain experience in the logistics of pen testing, Linux fundamentals, vulnerability assessments, detecting live systems, and more! This series, valued at $3,000, is free for Premium members, Team Accounts, and Qualified Experts.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now