Security and System event log issue

[Rippie_DK]

Hi all,

Hope someone can help me. I am having an odd issue with the domain client pc's on our network. The security and system event logs is being filled to max size within a day. which causes non admin people to not be able to log on.

I know that you can just set the log files to be overwritten when needed, but i would very much like to find the cause to the issue rather than just patch it. The Event ID in the security log are all 578 (http://techrepublic.com.com/5208-6230-0.html?forumID=39&threadID=172950&messageID=1760271) and for system logs it is a bit more random.

It did not use to do this, it started about a month ago, and i cant pinpoint if and what we changed that might have caused this. so if anyone is good at domain and event viewer please help.

Windows 2003 server enviroment

Windows XP client machines

Rippie

[Tripredacus]

It would be helpful if you could post more than just the event ID number, but what the event description says.

There is a lead here, that you are auditing an object:

http://www.techsupportforum.com/microsoft-...-event-log.html

more info:

http://windowsitpro.com/article/articleid/...d-578-logs.html

As I have not encountered this before, I recommend further research:

http://www.google.com/#hl=en&source=hp...ffa6ff748389786