Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

Excessive 4624 and 4634 events

$
0
0


Windows Server 2012 AD DC, users on Windows 7 SP1 x64 are logging in (~800 or so users). A small percentage of them are generating 300-400 logon events in the Security log - *per second*. 

Most other users are not generating excessive logon events... this is filling our security log quite fast. 

P.S. I suspect this happened after Logon and Logoff event auditing has been configured in the Advanced Audit Policy Configuration (Success and Failure). Still - most users do not generate that much logon events when logging in. 

Some incompetent moderator is marking all similar questions as answered even though they are NOT. So I am reposting - yet again - and let's hope this time the mods will hold their horses until the reason and a solution is actually found. 


Viewing all articles
Browse latest Browse all 31638

Trending Articles