+ Post New Thread
Results 1 to 10 of 10
Windows Thread, Security log going mental in Technical; My security log is going into overdrive - please see attached screen shot. Anyone got any ideas. I think this ...
  1. #1
    KWestos's Avatar
    Join Date
    Jan 2008
    Posts
    520
    Thank Post
    91
    Thanked 54 Times in 45 Posts
    Rep Power
    24

    Security log going mental

    My security log is going into overdrive - please see attached screen shot.

    Anyone got any ideas. I think this is causing my machine to periodically lose network connections also
    Attached Images Attached Images

  2. #2
    sharkster's Avatar
    Join Date
    Nov 2007
    Location
    Middlesbrough
    Posts
    149
    Thank Post
    23
    Thanked 26 Times in 21 Posts
    Rep Power
    18
    getting hacked

  3. #3
    sharkster's Avatar
    Join Date
    Nov 2007
    Location
    Middlesbrough
    Posts
    149
    Thank Post
    23
    Thanked 26 Times in 21 Posts
    Rep Power
    18
    only joking don't have a clue what its doing :S

  4. #4
    Diello's Avatar
    Join Date
    Jun 2005
    Location
    Kent, England
    Posts
    1,063
    Thank Post
    111
    Thanked 228 Times in 128 Posts
    Rep Power
    73
    Seems you have Auditing set to report on everything! have you checked your Local Security Policy?

  5. #5
    KWestos's Avatar
    Join Date
    Jan 2008
    Posts
    520
    Thank Post
    91
    Thanked 54 Times in 45 Posts
    Rep Power
    24
    I have just found out that it happens on all other machines too!
    Last edited by KWestos; 4th November 2008 at 04:52 PM.

  6. #6
    KWestos's Avatar
    Join Date
    Jan 2008
    Posts
    520
    Thank Post
    91
    Thanked 54 Times in 45 Posts
    Rep Power
    24
    Quote Originally Posted by Diello View Post
    Seems you have Auditing set to report on everything! have you checked your Local Security Policy?
    Is this local security policy within active directory?

  7. #7

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,686
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    If it is happening on all machines that would indicate that it is probably a domain based policy, it will be under the computer config > windows settings > security settings > local policies > audit policies of one of your policies.

    It may be quickest to run the RSoP snapin on the server or use the gp managment console to make a summary of all the policies that are appling and then see which of your domain policies is set to enable auditing

  8. #8
    KWestos's Avatar
    Join Date
    Jan 2008
    Posts
    520
    Thank Post
    91
    Thanked 54 Times in 45 Posts
    Rep Power
    24
    Quote Originally Posted by SYNACK View Post
    If it is happening on all machines that would indicate that it is probably a domain based policy, it will be under the computer config > windows settings > security settings > local policies > audit policies of one of your policies.

    It may be quickest to run the RSoP snapin on the server or use the gp managment console to make a summary of all the policies that are appling and then see which of your domain policies is set to enable auditing
    Out of the 9 possible policy settings - which ones do you or others have set?

  9. #9
    KWestos's Avatar
    Join Date
    Jan 2008
    Posts
    520
    Thank Post
    91
    Thanked 54 Times in 45 Posts
    Rep Power
    24
    I have now switched off all policy settings for auditing and I still get all the messages every 3 or 4 minutes - help!

  10. #10
    KWestos's Avatar
    Join Date
    Jan 2008
    Posts
    520
    Thank Post
    91
    Thanked 54 Times in 45 Posts
    Rep Power
    24
    Having stopped all the auditing from active directory, I think I may have solved it. When I stopped them on AD the local policies kicked in and I forgot about these. I have stopped these logging for the time being and it seems to have sorted it. I will probably enable them one by one to get a good balance of logging audits.

    What do other people use, i.e. which policies are set.

    Jesus - I just realised the time. 22:45 - I've been logged in from home for 4 hours! what a sad git!

SHARE:
+ Post New Thread

Similar Threads

  1. clear old cookies on log off (or log on)
    By ZeroHour in forum Scripts
    Replies: 0
    Last Post: 4th November 2008, 09:32 AM
  2. Can log on Local can't log on to domain
    By speckytecky in forum Network and Classroom Management
    Replies: 16
    Last Post: 25th April 2008, 12:05 PM
  3. Do Not Log On
    By button_ripple in forum Wireless Networks
    Replies: 3
    Last Post: 17th January 2008, 05:58 PM
  4. Stopped security event log
    By Jobos in forum Windows
    Replies: 3
    Last Post: 10th September 2007, 12:48 PM
  5. Do I Need To Log On ?.
    By tickmike in forum Hardware
    Replies: 11
    Last Post: 18th August 2006, 08:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •