I get the "Security Log is Full" error when I log onto my SBS 2003 SP1
server. No problem. I always save it before I vlear it. This time it gave me
an error saying I could save it because "Access is denied". Never happend
before as I always save a copy before I clear it. Any ideas? And yes I am
logged in as the administrator. thanks.

RE: Strange error when attempting to clear Event Log (Security) by v-robmen

v-robmen
Fri Jul 11 05:19:47 PDT 2008




Hello Allen,

Thank you for your post.

My name is Robbin Meng, and it is my pleasure to work with you on this
issue!

Please allow me to confirm that my understandings are correct. As I
understand it, the issue is:

Usually you receive "Security Log is Full" error when you log onto SBS 2003
SP1 server. Recently, it generates "Access is denied" after logging on SBS
2003 computer and trying to save the Security log file, although you are
using Administrator account.

If I have misunderstood your concerns please feel free to let me know.

This issue may occur if there is any wrong group policy settings on the SBS
server. Please try:

Step 1: Check the Group Policy settings for "Restrict guest access to
application log"

You receive an "Access is denied" error message when you try to access an
event log on a Windows Server 2003-based computer or on a Windows
2000-based computer
http://support.microsoft.com/kb/842209/en-us


Step 2: Delete old event log files in Safe Mode

Please go into Safe Mode (Restart computer, press the F8 key when the boot
menu pops up, select [Safe Mode], and boot up)
Then and go to C:\windows\system32\config folder to find SceEvent.evt file
and delete it.( please bakup it before remove)

If you cannot delete it, please open Event Viewer to try to save it again.
Does the Access Denied error still occur now in Safe Mode?

Last but not least, if you have any anti-virus or anti-spam installed on
the SBS server, please temporarily disable all of them.



If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

Information Need
==============
Please capture some screenshot when the error messages appear and send them
to me : v-robmen@microsoft.com


Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.

Thank you for your time and cooperation.


Best regards,

Robbin Meng(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.