How to find the root cause for the event ID 521 for the 2019 windows servers ?

Question

How to find the root cause for the event ID 521 for the 2019 windows servers ?

Answer 1

Hello,

Event ID 521 on Windows Server 2019 indicates that the system was unable to log security events to the Security log.

Here are some steps you can take to troubleshoot.

Ensure that the Security log is not full. You can increase the log size or set it to overwrite events as needed.

Navigate to Event Viewer > Windows Logs > Security. Right-click and select Properties to adjust the log size/Clear log.

Adjust the BufferSize and MaximumBuffers in the registry to accommodate the number of audit events.

https://serverfault.com/questions/740281/event-id-521-critical-logging-failure-on-domain-controllers

Hope this helps.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.