I usually run 128MB on the sec logs. What happens if cumulative is over 300MB 
on a DC?

Dave

From: Brian Desmond [mailto:br...@briandesmond.com]
Sent: Friday, June 04, 2010 9:25 AM
To: NT System Admin Issues
Subject: RE: GPO question

I usually go with around 150MB. Keep in mind that on a 32bit box you want the 
cumulative size of all your event logs to be <=300MB. You should size your app 
and system logs accordingly as well.

Also note that the policy will not shrink logs if you have them bigger than 
your new maximum.

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132

From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Friday, June 04, 2010 10:35 AM
To: NT System Admin Issues
Subject: Re: GPO question

You're going to want to make it larger than 512K, btw.

8MB or 16MB will be more useful numbers.

-ASB: http://XeeSM.com/AndrewBaker
On Fri, Jun 4, 2010 at 10:45 AM, Bill Lambert 
<blamb...@concuity.com<mailto:blamb...@concuity.com>> wrote:
All my domain pc's are displaying a message on the login window that the 
security log is full and only an administrator can correct this.  I'm trying to 
find where the properties of the Event Viewer security logs are set in GP.  I 
think another admin has set this up but I can't find it.  Can someone direct me 
to where these settings are?  I want to set it to 512kb and overwrite as 
necessary.

Thanks in advance!

Bill Lambert
Windows System Administrator
Concuity
Phone  847-941-9206
Fax  847-465-9147
[cid:image001.gif@01CB03CA.EE848350]


The information contained in this e-mail message, including any attached files, 
is intended only for the personal and confidential use of the recipient(s) 
named above. If you are not the intended recipient (or authorized to receive 
information for the recipient) you are hereby notified that you have received 
this communication in error and that any review, dissemination, distribution, 
or copying of this message is strictly prohibited. If you have received this 
communication in error, please contact the sender by reply email and delete all 
copies of this message.  Thank you.















~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

<<inline: image001.gif>>

Reply via email to