The security log is now full (Windows 11 Only)

Anonymous
2022-12-20T07:02:25+00:00

Hi all,

Need your help, all devices that i monitor using windows 11 will hit the error (The security log is now full - Event ID 1104.) Need your advise for solve this problem

Temporary solution

  • I clear log and overwrite in event viewer but still happen back on the next day.

Thanks.

Windows for home | Windows 11 | Accounts, profiles, and login

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2023-09-28T18:40:18+00:00

    open gpedit.msc and apply the local computer policy for the following.

    Computer Configuration > Administrative Templates > Windows Component
    > Event Log Service > Security > Control Event Log Behavior when the
    log file reaches its maximum size, Set it to Disabled

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-09-28T18:37:24+00:00

    The fix I have found is to open gpedit.msc and apply the local group policy for the following.

    Computer Configuration > Administrative Templates > Windows Component
    > Event Log Service > Security > Control Event Log Behavior when the
    log file reaches its maximum size, Set it to Disabled

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2023-09-18T20:27:26+00:00

    I did the following steps below using a GPO to deploy to specific computers in the domain. I haven't had that issues since making the changes in April 2023.

    • Set the Retention for the security log to Overwrite Events as Needed (setting to days to clear no longer works)
    1. Open GPMC and Edit the correct GPO that applies to the OU of the computers
    2. Computer -- Policies -- Windows Settings -- Security Settings -- Event Log
    3. Configure Retention to Overwrite Events as Needed
    • You MUST increase the Maximum Security Log size to 4,194,240 kilobytes.

    Apply the GPO and restart or run gpupdate /force followed by a restart.

    NOTE 01: Some systems required a system file repair for this GPO to take by running sfc /scannow in elevated CMD.

    NOTE 02: Other systems may require a manual Clear of the security logs in the Event Viewer before the settings take.

    I hope this helps.

    • Robert

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2023-09-14T09:49:20+00:00

    Hello

    Please any solution for this issue ?

    Regards

    Was this answer helpful?

    0 comments
  5. Anonymous
    2023-08-21T09:02:53+00:00

    Hi,

    we have the same problem.

    For now for fix temporarily the issue we increased the log file to 1 gb, set automatic in security property and in cmd (in administrator mode) used this comand:

    for /F "tokens=*" %1 in ('wevtutil.exe el') DO wevtutil.exe cl "%1"

    The policy solution is not clean because applies it in all pc (also w10) and every reset.

    Microsoft please after six months the problem should already be fixed.

    It is a big problem because many people are in domain and can be possible that this issue happen when the worker aren't in office.

    Thanks.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments