Solved

W2k event view question

Posted on 2004-04-24
5
244 Views
Last Modified: 2010-04-13
Hi there
W2000 server,domain controler.evrything works fine but Security event log.shows only event 517(last time I cleared the same 517 log,doesn't generate any event anymore)...
Any ideas
0
Comment
Question by:Peter1111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 31

Accepted Solution

by:
Gareth Gudger earned 50 total points
ID: 10907958
The security log typically doesnt generate anything unless you turn auditing on.
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10908912
Yes auditing is on.
thanks
0
 
LVL 1

Assisted Solution

by:mclean01
mclean01 earned 50 total points
ID: 10909158
Event ID 517 only occurs when someone clears the Security Event log.

When you say doesn't generate any events, do you mean all events or just 517?  If its not logging any events at all, have you tried deleting the log file itself and recreating it?

Default location: \WINNT\System32\config\SecEvent.Evt
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10909867
It's not loging any events at all.I have not tried deleting the log file.I have to wait till monday
Thanks
0
 
LVL 1

Author Comment

by:Peter1111
ID: 10938641
Hi there.I got it. Domain Controler Policy Auditing was on, but Local wasn't. I checked "No Override" under Default Domain Controler Policy Options and so far so good.Thanks again
0

Featured Post

[Webinar] Learn How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Sometimes clients can lose connectivity with the Lotus Notes Domino Server, but there's not always an obvious answer as to why it happens.   Read this article to follow one of the first experiences I had with Lotus Notes on a client's machine, my…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question