The security log is now full (Windows 11 Only)

Anonymous
2022-12-20T07:02:25+00:00

Hi all,

Need your help, all devices that i monitor using windows 11 will hit the error (The security log is now full - Event ID 1104.) Need your advise for solve this problem

Temporary solution

  • I clear log and overwrite in event viewer but still happen back on the next day.

Thanks.

Windows for home | Windows 11 | Accounts, profiles, and login

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-10-31T15:52:02+00:00

    Hi Muhammad,

    Good day! I’m Jhakesong and I'll try to help you today.

    Give this Event Viewer settings a try and see if it helps. This should avoid the Security log cache being full.

    1. Launch Event Viewer
    2. Expand Windows Logs
    3. Click Security
    4. Look under Actions (Right side portion of the window)
    5. Click Properties
    6. At the very bottom, Under "when maximum event log size is reached", Select Overwrite events as needed (oldest events first)
    7. Click Apply and click Okay.
    8. Check if the issue still persists

    Let me know how it goes. Have a great day!

    I'm experiencing the same thing. Except when I change the settings to what you suggested, it reverts back to the original settings for some reason.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2023-09-28T18:37:24+00:00

    The fix I have found is to open gpedit.msc and apply the local group policy for the following.

    Computer Configuration > Administrative Templates > Windows Component
    > Event Log Service > Security > Control Event Log Behavior when the
    log file reaches its maximum size, Set it to Disabled

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2023-03-27T23:37:43+00:00

    The GPO setting doesn't work. The first Windows 11 update (which are automatic on our machines) and it resets back to "Do not overwrite".

    I made a daily scheduled task to run "wevtutil cl Security" to clear the Security log using a network admin, but that doesn't seem to work either.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  4. Anonymous
    2023-03-21T18:33:42+00:00

    This is the only GPO work around that i have seen for this issue,
    But this is not preferable, because it looks like this is happening because something (chrome/edge) is logging to much information , in these logs.
    Computer configuration > policies > windows settings > security settings > event log >

    Retention method for security log As needed

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2023-03-20T14:45:01+00:00

    Does anyone have a ticket with Microsoft internal support for this request?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments