can't clear security log as local admin

G

Guest

I have a bunch of Windows XP workstations in our 2003 Active Directory
domain. From time to time, the security log fills up and it won't let anyone
but an admin log in. For some reason, a local admin of that workstation can
log in but can't see or clear the security logs. I'm not sure if this is a
group policy thing or not. Does anyone have any ideas?
 
S

Steven L Umbach

Make sure that the user that is also a local administrator is not a member
of the guests groups and in Local Security Policy make sure administrators
have the user right for manage auditing and security log. If that does not
help the security log may be corrupt. You may also want to consider
increasing the size of the security log quite a bit and configure the
security log to overwrite events as needed. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;172156 --- this
may help with corrupt logs
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top