Possible Windows 10 November 2024 Update Issues?

Question

So, I come into my place of work this morning and suddenly most of my users are reporting that they can't log into their systems as they are getting a security log full message. When I check the systems, I find that the security log is full and has not archived as it should have.

These are all Windows 10 22H2, and I have verified that all the winevt folder permissions are correct and that archiving is set in the log settings, and all systems have plenty of disk space. The logs were archiving fine prior to today (last archive for most was the 14th and we also offload the archived logs weekly). The ONLY change on any of the affected systems was that they all received the Nov 2024 Windows updates at some point yesterday (and yes, I tried a reboot and the system still didn't archive the full log).

Is anyone else seeing this issue since patching their systems this month?

***moved from Windows / Windows 10 / Windows update, recovery, and backup***

Answer 1

Hello  RabbiddogRH1，

Thank you for posting in Microsoft Community forum.

There have been reports from other users encountering similar problems with the security log not archiving after the November 2024 Windows updates. Here are some steps you can take to address this issue:

enabling/ disabling the following policies via GPO sorted the issue out.

1. Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Audit: Shut down system immediately if unable to log security audits
   Set the security policy to > disabled
2. Computer Configuration > Administrative Templates > Windows Component > Event Log Service > Security > Control Event Log Behavior when the log file reaches its maximum size,

Set the security policy to > disabled

1. Computer Configuration\Windows Settings\Security Settings\Event Log\Retention method for security log Audit.

Define this policy setting > select overwrite events as needed

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,

Haijian Shan

Answer 2

Microsoft. This problem is bigger than you think. You need to create a patch as it is affecting many computers in my environment. Not good

Answer 3

Windows 10 wont boot up after Nov 2024 update pop up stuck on "repairing disk for errors"