The security log is now full (Windows 11 Only)

Anonymous
2022-12-20T07:02:25+00:00

Hi all,

Need your help, all devices that i monitor using windows 11 will hit the error (The security log is now full - Event ID 1104.) Need your advise for solve this problem

Temporary solution

  • I clear log and overwrite in event viewer but still happen back on the next day.

Thanks.

Windows for home | Windows 11 | Accounts, profiles, and login

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-02-07T09:09:58+00:00

    Issue returning after following the above suggestion.

    Hey Masud,

    Have you tried the fix I replied with on 16/01/24?

    I've edited the "Default Domain Policy" > Computer Configuration > Policies > Windows Settings > Security Settings > Event Log > Retain Security Logs in Group Policy Management on our server from a value of "90 days" to "Not Defined".

    I've since connected to a few Windows 11 laptops, confirmed their Event Viewer settings are set to Overwrite logs when full, and they've continued to work well for weeks since.

    Hope that helps.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-02-02T18:24:09+00:00

    Issue returning after following the above suggestion.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-01-16T11:39:21+00:00

    Hey Ultar,

    I've since found a more complete fix, or at least one that worked for me.

    I've edited the "Default Domain Policy" > Computer Configuration > Policies > Windows Settings > Security Settings > Event Log > Retain Security Logs in Group Policy Management on our server from a value of "90 days" to "Not Defined".

    I've since connected to a few Windows 11 laptops, confirmed their Event Viewer settings are set to Overwrite logs when full, and they've continued to work well for weeks since.

    Hope that helps.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2024-01-16T07:52:12+00:00

    Hello,

    Did anyone found any solution regarding this issue ?

    Was this answer helpful?

    0 comments
  5. Anonymous
    2023-10-25T07:11:19+00:00

    I did the following steps below using a GPO to deploy to specific computers in the domain. I haven't had that issues since making the changes in April 2023.

    • Set the Retention for the security log to Overwrite Events as Needed (setting to days to clear no longer works)
    1. Open GPMC and Edit the correct GPO that applies to the OU of the computers
    2. Computer -- Policies -- Windows Settings -- Security Settings -- Event Log
    3. Configure Retention to Overwrite Events as Needed
    • You MUST increase the Maximum Security Log size to 4,194,240 kilobytes.

    Apply the GPO and restart or run gpupdate /force followed by a restart.

    NOTE 01: Some systems required a system file repair for this GPO to take by running sfc /scannow in elevated CMD.

    NOTE 02: Other systems may require a manual Clear of the security logs in the Event Viewer before the settings take.

    I hope this helps.

    • Robert

    Thank you very much, it helped.

    Was this answer helpful?

    0 comments