The security log is now full (Windows 11 Only)

Anonymous
2022-12-20T07:02:25+00:00

Hi all,

Need your help, all devices that i monitor using windows 11 will hit the error (The security log is now full - Event ID 1104.) Need your advise for solve this problem

Temporary solution

  • I clear log and overwrite in event viewer but still happen back on the next day.

Thanks.

Windows for home | Windows 11 | Accounts, profiles, and login

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-03-15T17:26:32+00:00

    I was hoping yesterday's March Updates might have included a fix, but nope. My machine rebooted last night after the updates, and I was greeted first thing in the morning with not being able to log into my system yet again.

    We aren't running Windows 11 in Production fortunately and it seems to be limited to Win11 22H2, so I haven't really been looking for a clever solution to fix it, I was just hoping it would be fixed by Microsoft. I am losing hope that this will be addressed and will probably need to come up with a solution.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Ramesh 181.7K Reputation points Volunteer Moderator
    2023-01-27T16:33:33+00:00

    Yusuf,

    Have you tried the AuditPol command-line on that page to turn off WFP logging, anyway? I think that will help.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2023-01-27T13:52:15+00:00

    Hi, Yusuf,

    I don't work for microsoft, just a fellow user trying to figure out what is wrong, sharing data so maybe we can figure this out as a community... I have no insight into what MS did/what's causing this.

    George

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  4. Anonymous
    2023-01-27T13:42:49+00:00

    Thanks, George,

    Your information is helpful! we are also investigating the security logs files and find 90% of the log problem is 'Filtering Platform Connection' event id 5156 is generating.

    Can you explain to me what the cause is it's happening in only windows 11 and GPO behavior also changed?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2023-01-11T08:07:08+00:00

    This must have happened after a recent recent update. Now several of my computer in the domain are exhibiting this issue.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments