Non stop event id

G

Guest

One fo the DC (2003) keep generating event id 538, 540 & 576.
This caused the security event log full in 3 minutes .


Any way to check which service keep generating the 3 events ?
 
M

Meinolf Weber

Hello DD,

Check your domain controllers policy for Auditing configuration:

Audit logon events: 538 unsuccesfull logon 540 succesfull logon

576 audit privilege use

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Unexplained 540 Events in Security log on W2K workstation in a dom 0
Event ID 538/540/576 fills up Security Log!! 3
Windows 2003 Server, Constant Logon/Logoff in my Security Log - does this mean something is worng? 0
Excessive computer account logon/logoff loggining on security log 5
Auditing User logon/logoff events. 2
Event ID 538 & 540 whenuser did not logon 4
Event Error Logs with Event ID 538 and 540 1
Event ID's constantly logged 1

Top