1

When I remote into my work computer from home, I get an error message about 'windows security log is full'. Once I click OK, everything seems to work fine.

Is this something I should be worried about? how do I make it not happen?

Improve this question

2 Answers 2

Reset to default
5

Whereas you won't be adversely affected by it from a performance standpoint, you will not receive security notifications that get sent to that event log which can be worrisome.

You can go into Computer Management, expand the Event Viewer, right-click on the Security event log and set properties for the log size there which can make that notification go away. I'd suggest Overwrite events as needed in your case.

Security Event Log

Improve this answer
2
  • I would also increase the size those units are only KB!
    – Guy Thomas
    Commented Nov 17, 2009 at 19:43
  • Yeah, I just pulled the default off of one of my machines :)
    – squillman
    Commented Nov 17, 2009 at 20:03
0

You might want to find out what events are filling up the log. Increasing the log file size and setting it to overwrite as needed will help capture the events. Usually you shouldn’t fill up the security log that quickly.

I've seen that if you have Audit Process Tracking enabled in the local computer policy it will flood your security log with events.

Run gpedit.msc Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy > Audit process tracking

Improve this answer
1
  • Yeah looks like audit was on. However I do not have permission to change this, so I will have to live with it.
    – Matthew Scouten
    Commented Nov 17, 2009 at 21:15

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .