Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Domain Controller Security Event Logs

Posted on 2010-11-21
9
Medium Priority
?
1,750 Views
Last Modified: 2012-05-10
Hi,

Does anybody know what is the maximum safe size for security logs on a Win2k3 domain controller ?

If i change the event logs size on one DC, does it also replicate across all DCs?

Thanks :)
0
Comment
Question by:sproku
  • 4
  • 3
  • 2
9 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34185158
Where I am we use the NSA or DISA guides  http://iase.disa.mil/stigs/content_pages/windows_os_security.html   I'll look to see what they recommend but you can also see for your OS

No the size is not replicated but you can set it using group policy so it applies to all the servers (or DCs)

Thanks

Mike
0
 
LVL 15

Expert Comment

by:getzjd
ID: 34185166
You will need to set this on all domain controllers.  It will not replicate.

Here is some info on the sizes
http://support.microsoft.com/kb/957662
http://technet.microsoft.com/en-us/library/cc776342(WS.10).aspx
0
 
LVL 15

Expert Comment

by:getzjd
ID: 34185172
YOu could set the log sizes via a GPO on the domain controllers.

http://technet.microsoft.com/en-us/library/cc778402(WS.10).aspx
0
Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database

 

Author Comment

by:sproku
ID: 34185223
I see that maximum security log size that can be set is up to 4GB. What would be the cons when i set it to the max of 4GB?
0
 
LVL 15

Assisted Solution

by:getzjd
getzjd earned 186 total points
ID: 34185231
Parsing the files would take longer.  Depends on what you are wanting to do with these log files.
0
 

Author Comment

by:sproku
ID: 34185255
are there no system performance degradation when raising it to max size?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 189 total points
ID: 34185265
0
 

Author Comment

by:sproku
ID: 34185932
i see. i guess I'll just go with archiving of the log files.

thanks guys.
0
 

Author Closing Comment

by:sproku
ID: 34185939
thanks guys
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

575 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question