Defined Actions for Administrative Alerts Do Not Occur When the Security Log Is Full

Support for Windows XP has ended

Microsoft ended support for Windows XP on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article has been archived. It is offered "as is" and will no longer be updated.
Symptoms
Defined actions for a configured administrative alert do not occur when counter data triggers an alert because of a full security log.

For example, when you select the Do not overwrite events (clear log manually) setting for your security event log, and then you configure an administrative alert for computer_name\Objects\Events, the defined actions for the administrative alert are not carried out when the maximum log size is reached for your security log.
Resolution

Windows 2000

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in theMicrosoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack

Windows XP

To resolve this problem, obtain the latest service pack for Windows XP. For additional information, click the following article number to view the article in theMicrosoft Knowledge Base:
322389 How to Obtain the Latest Windows XP Service Pack
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows XP Service Pack 1 (SP1) and Windows 2000 Service Pack 3 (SP3).

Acknowledgment: Eitan Caspi contributed to this Microsoft Knowledge Base article.
More information
For additional information about how to set up administrative alerts in Windows XP and Windows 2000, click the article numbers below to view the articles in the Microsoft Knowledge Base:
310490 HOW TO: Set Up Administrative Alerts in Windows XP
243625 How to Configure Administrative Alerts in Windows 2000
Properties

Article ID: 329350 - Last Review: 01/12/2015 20:53:29 - Revision: 3.0

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Professional
  • kbnosurvey kbarchive kbbug kbfix kbsecurity kbwin2000sp3fix kbwinxpsp1fix KB329350
Feedback