The security log is now full (Windows 11 Only)

Anonymous
2022-12-20T07:02:25+00:00

Hi all,

Need your help, all devices that i monitor using windows 11 will hit the error (The security log is now full - Event ID 1104.) Need your advise for solve this problem

Temporary solution

  • I clear log and overwrite in event viewer but still happen back on the next day.

Thanks.

Windows for home | Windows 11 | Accounts, profiles, and login

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2023-09-14T09:49:20+00:00

    Hello

    Please any solution for this issue ?

    Regards

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-09-18T20:27:26+00:00

    I did the following steps below using a GPO to deploy to specific computers in the domain. I haven't had that issues since making the changes in April 2023.

    • Set the Retention for the security log to Overwrite Events as Needed (setting to days to clear no longer works)
    1. Open GPMC and Edit the correct GPO that applies to the OU of the computers
    2. Computer -- Policies -- Windows Settings -- Security Settings -- Event Log
    3. Configure Retention to Overwrite Events as Needed
    • You MUST increase the Maximum Security Log size to 4,194,240 kilobytes.

    Apply the GPO and restart or run gpupdate /force followed by a restart.

    NOTE 01: Some systems required a system file repair for this GPO to take by running sfc /scannow in elevated CMD.

    NOTE 02: Other systems may require a manual Clear of the security logs in the Event Viewer before the settings take.

    I hope this helps.

    • Robert

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2023-09-28T18:37:24+00:00

    The fix I have found is to open gpedit.msc and apply the local group policy for the following.

    Computer Configuration > Administrative Templates > Windows Component
    > Event Log Service > Security > Control Event Log Behavior when the
    log file reaches its maximum size, Set it to Disabled

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  4. Anonymous
    2023-09-28T18:40:18+00:00

    open gpedit.msc and apply the local computer policy for the following.

    Computer Configuration > Administrative Templates > Windows Component
    > Event Log Service > Security > Control Event Log Behavior when the
    log file reaches its maximum size, Set it to Disabled

    Was this answer helpful?

    0 comments
  5. Anonymous
    2023-10-06T09:37:16+00:00

    as instructed settings has been changed but again issue occurred again & again.

    Was this answer helpful?

    0 comments