Solved

Thousand of occurrence in the security log

Posted on 2008-10-31
2
367 Views
Last Modified: 2010-03-05
My security log at my SBS2003 server fills up with thousand of occurrence every hour even thou if i turned off the logon/logoff. Ayone who can help me? I've had this problem for a while noe and my server go down because it genrated so many occurrence in the security log. I've tried to use Domain Security Controller to turn off the monotoring but my Security log still fills up.
Anyone can help?
0
Comment
Question by:scancom
2 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 22852496
0
 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22853418
1.Large ammount of 538 and 540 events in your case indicates that users connect (or disconnect from) to your server's shares - nothing else. This event are rom Logon/Logoff audit policy which can be disabled. If I understand you correctly you should have Object access audit policy enabled. If your Security log is filling up with events to quickly, increase the log size or disable some of the auditing policies.

2.It may be that the machine has been elected as the master browser for that subnet.  Everytime someone makes a request for the browser list it would log an anonymous logon/logoff in the security log and browstat status will tell you who the master browser is
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now