The Security Log on this system is full.....

The Security Log on this system is full. Only administrators can log on to fix the problem

Hello, this is my first post so please be nice

I have several laptops (various models), all running Windows XP SP2 with latest MS critical updates ect...

Basically every so often I get the above message at the 3 box login when booting up from a clean power down.

We have all the Security Log file properties set to the XP "out of the box" standards;
Maximum log Size - 512KB
Overwrite events older than 7 days

I noticed on one of the machines that had this "error" that the event logs didn't have any entries over 7 days old. I expect this caused the problem that time.

Does anyone know of any 3rd party software / Apps that can effect the system log properties?

We do have the option of changing these settings via EPO to overwrite log files when needed but i'd prefer to find the cause

Any help would be greatly appreciated.

Best regards
Dan

 

Dan,

The machine that is getting this error, are they any shared folders or any other people trying to access that laptop on the network?

Reason why I ask is because most windows xp pro operating systems are set up with defualt auditing. So everytime a user attempts to access that machine, it will log it. as a "success audit" or a "failure audit" If alot of users are trying to access that laptop for files, folders, anything, the log can fill up relativly quickly. I've had this happen to one of my servers that I host intranet sites off of. Simply either increase the size of the log, or adjust how many days you want the log to store events for. That, or you can continue to just save the log files somewhere on that machine or your network, and just clear it after you've saved it.

Hope this helps.

 

Hello

Thanks for responding to my post...

Thinking outside the box comes to mind

We spotted only yesterday that one of the effected machines had a driver conflict for its CD drive causing the system event log to fill up and produce the "error" as the logs were not over 7 days old.

Thanks again
Dan