Windows 2003 SBS Constantly logging Security Events

Posted on 2007-07-31
Last Modified: 2010-05-18
I have a Windows 2003 SBS that is really slow serving clients. There are only 10 clients on the network and the often have to wait 1-2 minutes to open up a word document.  I looked thru the event log and the first glaring strange thing was that event id's 576, 540, and 538 are constantly coming up in the Security Audit Log.  When I say constantly I mean every 45-60 seconds.  Any idea's on why these are happening and if they might be causing the Server to respond slowly to network requests.
Question by:degoodwin
    LVL 21

    Expert Comment

    did you already update the NIC of the server drivers?
    also client nic driver updates
    please post an ipconfig /all from the server and the clients please.
    LVL 12

    Accepted Solution

    slow networks are commonly caused by improper DNS settings. Double check that all client computers are pointing to your internal DNS server, in this case it's most likely your 2003 SBS, and nothing else. Then your DNS server should point to itself for DNS, again nothing else. Then in DNS (in administrative tools) you can set your ISP's DNS server as a forwarder. That way, your DNS server will only forward to your ISP if it can't resolve.

    Hope this helps.

    Author Comment

    I reset all the DNS settings and reconfigured the network and it seems to be working much better. Thanks. I figrued it was a DNS setting, just wnated to see if anyone had any other thoughts.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
    If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now