Solved

W2k event view question

Posted on 2004-04-24
5
243 Views
Last Modified: 2010-04-13
Hi there
W2000 server,domain controler.evrything works fine but Security event log.shows only event 517(last time I cleared the same 517 log,doesn't generate any event anymore)...
Any ideas
0
Comment
Question by:Peter1111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 31

Accepted Solution

by:
Gareth Gudger earned 50 total points
ID: 10907958
The security log typically doesnt generate anything unless you turn auditing on.
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10908912
Yes auditing is on.
thanks
0
 
LVL 1

Assisted Solution

by:mclean01
mclean01 earned 50 total points
ID: 10909158
Event ID 517 only occurs when someone clears the Security Event log.

When you say doesn't generate any events, do you mean all events or just 517?  If its not logging any events at all, have you tried deleting the log file itself and recreating it?

Default location: \WINNT\System32\config\SecEvent.Evt
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10909867
It's not loging any events at all.I have not tried deleting the log file.I have to wait till monday
Thanks
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10938641
Hi there.I got it. Domain Controler Policy Auditing was on, but Local wasn't. I checked "No Override" under Default Domain Controler Policy Options and so far so good.Thanks again
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Australian government abolished Visa 457 earlier this April and this article describes how this decision might affect Australian IT scene and IT experts.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question