Solved

I need to modify EVENT VIEWER Maximum log size with a GPO, Windows 2008r2

Posted on 2014-09-26
2
890 Views
Last Modified: 2014-10-14
We are running a Windows 2008r2 Active Directory environment. I have been given instructions to build a Windows 7 image that we can use as a standard workstation image. Part of the instructions include increasing the maximum log size of the Windows 7 Event Viewer. I did this manually on the image I built and when the workstation was actually joined to the domain the log size reverted back to 2048, which I assume is being set by a GPO. Can anyone give me some suggestions where I would find this GPO in Active Directory and how I would change the max to say 4096?
0
Comment
Question by:Thor2923
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 40346111
You are right you can set it via GPO

GPO_name\Computer Configuration\Windows Settings\Security Settings\Event Log\

http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx

You can also take an RSOP report for that box to see that GPO might be setting the size.

Thanks

Mike
0
 
LVL 5

Expert Comment

by:Abdul Khadja Alaoudine
ID: 40346123
The Group Policy setting is under:

Computer Configuration\Policies\Administrative Templates\Windows Components\Event Log Service

Setting name: Maximum Log Size (KB)
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question