Defined Actions for Administrative Alerts Do Not Occur When the Security Log Is Full

Defined actions for a configured administrative alert do not occur when counter data triggers an alert because of a full security log.

For example, when you select the Do not overwrite events (clear log manually) setting for your security event log, and then you configure an administrative alert for computer_name\Objects\Events, the defined actions for the administrative alert are not carried out when the maximum log size is reached for your security log.

Windows 2000

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

Windows XP

To resolve this problem, obtain the latest service pack for Windows XP. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows XP Service Pack 1 (SP1) and Windows 2000 Service Pack 3 (SP3).

Acknowledgment: Eitan Caspi contributed to this Microsoft Knowledge Base article.

For additional information about how to set up administrative alerts in Windows XP and Windows 2000, click the article numbers below to view the articles in the Microsoft Knowledge Base: