Avatar of adam_daunhauer
adam_daunhauer
Flag for United States of America asked on

I got a "security log is full" message when logging in with an Administrator account

I got a "security log is full" message when trying to log into a windows XP machine.
I know, why are we still using XP? We have to for a hand full of applications that still require it.

Anyway, the user that was trying to login was an Administrator on the PC, but it still would not let them log in.
I ended up logging in as a different Administrator and it let me in fine.
Then I went to Computer Management and under the Administrators group sure enough the one that was trying to login is already in there.

Any ideas why that user could not log in because the Log was full even though they were a local Administrator?
Windows XPSecurity

Avatar of undefined
Last Comment
Scott Silva

8/22/2022 - Mon
Scott C

You need to set the logs so they can be overwritten.

1.      Click Start, point to All Programs, point to Administrative Tools, and then click Event Viewer.
2.      Right-click Security, and then click Properties.
3.     In the Log Size area of the Security Properties window, click the Overwrite events as needed option under When maximum log size is reached.
4.      Click OK.
5.      Close Event Viewer.

That should take care of it for you.

https://support.microsoft.com/en-us/kb/867860
adam_daunhauer

ASKER
I know how to fix it, I was just wondering if anyone can tell me why it would not have recognized an Administrator account when trying to login.
Scott C

Who knows?  XP has been out of all support for over 18 months.

Running a root cause issue to ground is a waste of time.

I agree it's weird that it wouldn't let in one admin account but did let another.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
adam_daunhauer

ASKER
this has happened on 3 of our XP machines since last week so thought I would ask
ASKER CERTIFIED SOLUTION
Scott C

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
adam_daunhauer

ASKER
That was it. They Security team had added that account to a Domain AD Group that was over riding the Local administrators group.
Thanks
Scott C

Cool.  Glad I could help.

Anytime.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Scott Silva

A full log can stop ANY account from logging in I have had systems so locked up I had to push registry entries to them in the background to get them to allow logins...