XP machines lockout user accounts when security log is full.

[John Sherwin]

The workstations running XP on our W2K domain lockout when the
security log becomes full. The administrator is the only account which
is able to log in.
I would like to disable this feature but I can't seem where to do this
or if this is just some kind of bug.
Any help is appericated. I'm at a loss.

Thanks in advance.

 

[Steven L Umbach]

There is a security policy setting that is supposed to prevent that. You could enable
it in Domain Security Policy or at the OU level. It is under security settings/local
policies/security options - shut down system immediately in unable to audit security
audits. Make that setting "disabled" . Additionally I would disable the same setting
under the Event Log/settings for event log and set the retention method to be
overwrite events as needed. --- Steve