W2k event view question

Hi there
W2000 server,domain controler.evrything works fine but Security event log.shows only event 517(last time I cleared the same 517 log,doesn't generate any event anymore)...
Any ideas
LVL 1
Peter1111Asked:
Who is Participating?
 
Gareth GudgerConnect With a Mentor Commented:
The security log typically doesnt generate anything unless you turn auditing on.
0
 
Peter1111Author Commented:
Yes auditing is on.
thanks
0
 
mclean01Connect With a Mentor Commented:
Event ID 517 only occurs when someone clears the Security Event log.

When you say doesn't generate any events, do you mean all events or just 517?  If its not logging any events at all, have you tried deleting the log file itself and recreating it?

Default location: \WINNT\System32\config\SecEvent.Evt
0
 
Peter1111Author Commented:
It's not loging any events at all.I have not tried deleting the log file.I have to wait till monday
Thanks
0
 
Peter1111Author Commented:
Hi there.I got it. Domain Controler Policy Auditing was on, but Local wasn't. I checked "No Override" under Default Domain Controler Policy Options and so far so good.Thanks again
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.