I got a "security log is full" message when logging in with an Administrator account

adam_daunhauer
adam_daunhauer used Ask the Experts™
on
I got a "security log is full" message when trying to log into a windows XP machine.
I know, why are we still using XP? We have to for a hand full of applications that still require it.

Anyway, the user that was trying to login was an Administrator on the PC, but it still would not let them log in.
I ended up logging in as a different Administrator and it let me in fine.
Then I went to Computer Management and under the Administrators group sure enough the one that was trying to login is already in there.

Any ideas why that user could not log in because the Log was full even though they were a local Administrator?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Scott CSenior Engineer

Commented:
You need to set the logs so they can be overwritten.

1.      Click Start, point to All Programs, point to Administrative Tools, and then click Event Viewer.
2.      Right-click Security, and then click Properties.
3.     In the Log Size area of the Security Properties window, click the Overwrite events as needed option under When maximum log size is reached.
4.      Click OK.
5.      Close Event Viewer.

That should take care of it for you.

https://support.microsoft.com/en-us/kb/867860

Author

Commented:
I know how to fix it, I was just wondering if anyone can tell me why it would not have recognized an Administrator account when trying to login.
Scott CSenior Engineer

Commented:
Who knows?  XP has been out of all support for over 18 months.

Running a root cause issue to ground is a waste of time.

I agree it's weird that it wouldn't let in one admin account but did let another.
Rowby Goren Makes an Impact on Screen and Online

Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.

Author

Commented:
this has happened on 3 of our XP machines since last week so thought I would ask
Senior Engineer
Commented:
Is there anything in the System logs that shows anything when you were trying to log on?

Take a look at your group policies and see if there is anything there that might be messing with it.  That's the only thing I can think of that might have an impact.

Author

Commented:
That was it. They Security team had added that account to a Domain AD Group that was over riding the Local administrators group.
Thanks
Scott CSenior Engineer

Commented:
Cool.  Glad I could help.

Anytime.
Scott SilvaNetwork Administrator

Commented:
A full log can stop ANY account from logging in I have had systems so locked up I had to push registry entries to them in the background to get them to allow logins...

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial