Which log are you talking about? Can you please provide a little more
information than this? It helps us help you if you provide as much
information as you can about the problem.
-----Original Message-----
Which log are you talking about? Can you please provide a little more
information than this? It helps us help you if you provide as much
information as you can about the problem.
Assuming it was working before and auditing is still enabled as shown in effective
settings in Local Security Policy then you may have a corrupt.evt log. See the KB
link below for how to check on that. --- Steve
Perhaps you are hacked. Check the security auditing settings. In our
case there was a new user account under SYSTEM installed by a little
linux ftp server located somewhere in system32. They switch off the
security log.
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.
