Start Free Trial

asked on

Domain Controller Security Event Logs

Hi,

Does anybody know what is the maximum safe size for security logs on a Win2k3 domain controller ?

If i change the event logs size on one DC, does it also replicate across all DCs?

Thanks :)

Where I am we use the NSA or DISA guides http://iase.disa.mil/stigs/content_pages/windows_os_security.html I'll look to see what they recommend but you can also see for your OS

No the size is not replicated but you can set it using group policy so it applies to all the servers (or DCs)

Thanks

Mike

You will need to set this on all domain controllers. It will not replicate.

Here is some info on the sizes
http://support.microsoft.com/kb/957662
http://technet.microsoft.com/en-us/library/cc776342(WS.10).aspx

YOu could set the log sizes via a GPO on the domain controllers.

http://technet.microsoft.com/en-us/library/cc778402(WS.10).aspx

ASKER

I see that maximum security log size that can be set is up to 4GB. What would be the cons when i set it to the max of 4GB?

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

are there no system performance degradation when raising it to max size?

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

i see. i guess I'll just go with archiving of the log files.

thanks guys.

ASKER

thanks guys