Windows 2003 SBS Constantly logging Security Events

Posted on 2007-07-31
Medium Priority
Last Modified: 2010-05-18
I have a Windows 2003 SBS that is really slow serving clients. There are only 10 clients on the network and the often have to wait 1-2 minutes to open up a word document.  I looked thru the event log and the first glaring strange thing was that event id's 576, 540, and 538 are constantly coming up in the Security Audit Log.  When I say constantly I mean every 45-60 seconds.  Any idea's on why these are happening and if they might be causing the Server to respond slowly to network requests.
Question by:degoodwin
LVL 21

Expert Comment

ID: 19599442
did you already update the NIC of the server drivers?
also client nic driver updates
please post an ipconfig /all from the server and the clients please.
LVL 12

Accepted Solution

NetAdmin2436 earned 750 total points
ID: 19603605
slow networks are commonly caused by improper DNS settings. Double check that all client computers are pointing to your internal DNS server, in this case it's most likely your 2003 SBS, and nothing else. Then your DNS server should point to itself for DNS, again nothing else. Then in DNS (in administrative tools) you can set your ISP's DNS server as a forwarder. That way, your DNS server will only forward to your ISP if it can't resolve.

Hope this helps.

Author Comment

ID: 19692066
I reset all the DNS settings and reconfigured the network and it seems to be working much better. Thanks. I figrued it was a DNS setting, just wnated to see if anyone had any other thoughts.

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question