<div>
<div class="content wysiwyg-content">
In the Windows security log on our 2003 server I see an average of 12 events every second with event ID 538, 540, 576. Most of them have System as the user.<br />
<br />
What causes this many events and is there a way to reduce this traffic safely to reduce the network load? We hev three Windows 2003 servers and 35 XP &amp;&nbsp;7 workstations.
</div>
</div>


In the Windows security log on our 2003 server I see an average of 12 events every second with event ID 538, 540, 576. Most of them have System as the user.

What causes this many events and is there a way to reduce this traffic safely to reduce the network load? We hev three Windows 2003 servers and 35 XP & 7 workstations.

Windows Seciurty Log Events

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.