Announcement

Collapse
No announcement yet.

Event Viewer Security Spam

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Event Viewer Security Spam

    My event viewer security log is filling up in seconds (5 MG) with entries like these - server 2003
    Successful Network Logon:
    User Name: SERVER
    Domain: Domain
    Logon ID: (0x0,0x4781225D)
    Logon Type: 3
    Logon Process: Kerberos
    Authentication Package: Kerberos
    Workstation Name:
    Logon GUID: {ec51face-16ab-bc32-b99d-ddfdd0c54246}
    Caller User Name: -
    Caller Domain: -
    Caller Logon ID: -


    Special privileges assigned to new logon:
    User Name: SERVER
    Domain: Domain
    Logon ID: (0x0,0x47812330)
    Privileges: SeSecurityPrivilege
    SeBackupPrivilege
    SeRestorePrivilege
    SeTakeOwnershipPrivilege
    SeDebugPrivilege
    SeSystemEnvironmentPrivilege
    SeLoadDriverPrivilege
    SeImpersonatePrivilege
    SeEnableDelegationPrivilege

    I have turned off all security logging but still this fills up my log file, how do I stop this or at least change it to fail only?

  • #2
    Re: Event Viewer Security Spam

    Did you make the change in the local or domain policy? Domain policy will overwrite your local policy so make sure that's where the change is done.

    Comment


    • #3
      Re: Event Viewer Security Spam

      Hi ,

      When ever any user got logged in u got event in security loggin or users with special right will login at that time it creates entry in security loggin?

      kathy

      Comment

      Working...
      X