Problem with Event Viewer logs size

drClays 151 Reputation points
2023-02-22T11:35:01.31+00:00

Hello,

I have configured my AD Group Policy for Event Viewer like this:
User's image

but some users have got sometimes a problem to log in into a computer, where they got error:

the security log on this system is full. only administrators can sign in

"The fix" for it is when admin log in to this computer and clears security logs.

How to repair it?

Windows for business Windows Client for IT Pros Directory services Active Directory
Windows for business Windows Server User experience Other
Windows for business Windows Client for IT Pros User experience Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Limitless Technology 44,746 Reputation points
    2023-02-23T16:15:53.8733333+00:00

    Thank you for your question and reaching out. I can understand you are having query\issues related to Event log size.

    1. Please disable GPO settings -> Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Audit: Shut down system immediately if unable to log security audits
    2. Start --> Run --> EVENTVWR.MSC --> Right click Security log, go to Properties. Then, you can clear log, increase maximum log size or choose “Overwrite events as needed"

    Reference :

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/50cba37e-656e-4fb5-b02d-0d7cd03fc99c/security-log-full-amp-only-administrator-can-logon?forum=winserversecurity

    --If the reply is helpful, please Upvote and Accept as answer--


  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.