Security

Ask something
Question Locked

Security log is full

0 helpful
6 replies

by douglasemc 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

hi, i have ran into a serious problem, i changed a few settings on the group policies at work, and now everybody's computer is getting locket out with a message saying "security log is full anly administrators can login"

i changed the file siza to 1024 K in the group policie but the problem persists

my question is how do i delete the security logs?!!!!

6 replies

by mseaman

Log in click right on my computer | manage | expand event viewer | select security and right click | clear all events | select no when asked to save log. Also after that click right on security | properties | select overwrite events as needed. this way you will not have to deal with it again.

Mark

by douglasemc

thanks, that took care of that computer, but how can i do it for the other 149 users? without having to go one by one

-Douglas

by mseaman

I am not sure if you are use Active Directory domain...but if you are in Active Directory Users and Computers | select the computer | right click | select manage and the reset you will recognize it is the same as if you are login under the local admin account for that computer.

Not sure if there is a group policy that you can create in AD or not to do this or maybe a batch file would work to stream line this.

Mark

mark

by naughtymonkey

You will have to create the computer list text file and change that location in the script.

'Create a FileSystemObject
Set oFS = CreateObject("Scripting.FileSystemObject")

'Open a text file of computer names
'with one computer name per line
Set oTS = oFS.OpenTextFile("c:\computers.txt")

'go through the text file
Do Until oTS.AtEndOfStream

'get next computer
sComputer = oTS.ReadLine

'connect to the WMI provider
Set oWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate,(Backup,Security)}!\\" & _
sComputer & "\root\cimv2")

'query the Security logs
Set cLogFiles = oWMIService.ExecQuery _
("Select * from Win32_NTEventLogFile where " & _
"LogFileName='Security'")

'go through the collection of logs
For Each oLogfile in cLogFiles

'back up the log to a file
errBackupLog = oLogFile.BackupEventLog _
("c:\logfiles\" & sComputer & "\" & Date() & ".evt")

'see if an error occured
If errBackupLog <> 0 Then

'one did - display an error
Wscript.Echo "Couldn't get log from " & sComputer

Else

'no error - safe to clear the Log
oLogFile.ClearEventLog()

End If
Next
Loop

'close the input file
oTS.Close

by ashibhandari

if you any user so command is not working you will log in only administrator. if other virous problams

This discussion is closed to new replies.