?
Solved

W2k event view question

Posted on 2004-04-24
5
Medium Priority
?
246 Views
Last Modified: 2010-04-13
Hi there
W2000 server,domain controler.evrything works fine but Security event log.shows only event 517(last time I cleared the same 517 log,doesn't generate any event anymore)...
Any ideas
0
Comment
Question by:Peter1111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 31

Accepted Solution

by:
Gareth Gudger earned 200 total points
ID: 10907958
The security log typically doesnt generate anything unless you turn auditing on.
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10908912
Yes auditing is on.
thanks
0
 
LVL 1

Assisted Solution

by:mclean01
mclean01 earned 200 total points
ID: 10909158
Event ID 517 only occurs when someone clears the Security Event log.

When you say doesn't generate any events, do you mean all events or just 517?  If its not logging any events at all, have you tried deleting the log file itself and recreating it?

Default location: \WINNT\System32\config\SecEvent.Evt
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10909867
It's not loging any events at all.I have not tried deleting the log file.I have to wait till monday
Thanks
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10938641
Hi there.I got it. Domain Controler Policy Auditing was on, but Local wasn't. I checked "No Override" under Default Domain Controler Policy Options and so far so good.Thanks again
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This is a fine trick which I've found useful many times, when you just don't want to accidentally run a batch script or the commands needs administrator rights.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question