.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How can I configure the system to stop when the security log is full?
John Savill
December 21, 1999
1 Min Read
A. To avoid security logs being lost you can configure the system to halt if the security log becomes full so that only Administrators can logon, they can then archive the log and purge
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa
If CrashOnAuditFail exists then skip to step 4, if not from the Edit menu select New - DWORD value and enter a name of CrashOnAuditFail. Click OK
Double click on CrashOnAuditFail and set to either:
1 - Stop if the audit log is full
2 - This is set by the operating system just before the system crashes due to a full audit log. When set to 2 only the administrator can logon.Close the registry editor
When this happens the OS will display a BSOD.
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
