Security

Question

Locked

Security log is full

By douglasemc ·
hi, i have ran into a serious problem, i changed a few settings on the group policies at work, and now everybody's computer is getting locket out with a message saying "security log is full anly administrators can login"

i changed the file siza to 1024 K in the group policie but the problem persists

my question is how do i delete the security logs?!!!!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Under Local Admin account

by mseaman In reply to Security log is full

Log in click right on my computer | manage | expand event viewer | select security and right click | clear all events | select no when asked to save log. Also after that click right on security | properties | select overwrite events as needed. this way you will not have to deal with it again.

Mark

Collapse -

Genius!

by douglasemc In reply to Under Local Admin account

thanks, that took care of that computer, but how can i do it for the other 149 users? without having to go one by one

-Douglas

Collapse -

AD

by mseaman In reply to Genius!

I am not sure if you are use Active Directory domain...but if you are in Active Directory Users and Computers | select the computer | right click | select manage and the reset you will recognize it is the same as if you are login under the local admin account for that computer.

Not sure if there is a group policy that you can create in AD or not to do this or maybe a batch file would work to stream line this.

Mark

mark

Collapse -

You can try this one...

by NaughtyMonkey In reply to AD

You will have to create the computer list text file and change that location in the script.


'Create a FileSystemObject
Set oFS = CreateObject("Scripting.FileSystemObject")

'Open a text file of computer names
'with one computer name per line
Set oTS = oFS.OpenTextFile("c:\computers.txt")

'go through the text file
Do Until oTS.AtEndOfStream

'get next computer
sComputer = oTS.ReadLine

'connect to the WMI provider
Set oWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate,(Backup,Security)}!\\" & _
sComputer & "\root\cimv2")

'query the Security logs
Set cLogFiles = oWMIService.ExecQuery _
("Select * from Win32_NTEventLogFile where " & _
"LogFileName='Security'")

'go through the collection of logs
For Each oLogfile in cLogFiles

'back up the log to a file
errBackupLog = oLogFile.BackupEventLog _
("c:\logfiles\" & sComputer & "\" & Date() & ".evt")

'see if an error occured
If errBackupLog <> 0 Then

'one did - display an error
Wscript.Echo "Couldn't get log from " & sComputer

Else

'no error - safe to clear the Log
oLogFile.ClearEventLog()

End If
Next
Loop

'close the input file
oTS.Close

Collapse -

ya frist please check the user .

by ashibhandari In reply to Security log is full

if you any user so command is not working you will log in only administrator. if other virous problams

Related Discussions

Related Forums