Eventlog full - no one can login

[Guest]

The W2k server (domain controller) wont allow any attempts
to login. There is a message saying that the eventlog is
full. Can't login in any failsafe mode. Started with CD
and entered rescue mode.

Is it possible to delete the .evt files directly in "DOS"-
mode or does it have to be doen with some tool?

Can the .evt files be renamed to avoid the problem?

 

[Miha Pihler]

Hi,

logon to any windows server and open Computer Management Console (Start ->
Run -> compmgmt.msc and click OK). On the Computer Management (Local) right
click and select connect to another computer and enter the domain controller
name. Once you are connected you can drill down to event log and save logs
to different location, empty them, reserve more space for logs etc...

Mike

 

[Steven Umbach]

You should be able to logon after Mike's suggestion. Then see the link below on
what security option to disable in Domain Controller Security Policy. --- Steve

Shut Down the System Immediately if Unable to Log Security Audits ---
**DISABLE THIS OPTION**

http://www.microsoft.com/technet/Security/prodtech/win2000/win2khg/05sconfg.mspx