Did you first “move” the event log to another file system so that its no longer on the rootfs ?

That is a requirement for AutoArchiveEnabled (see the manual)

Are you logged in / connected as a user that is a member of the CIFS servers local Administrator group ?

Hi, Rainer.

Yes, I have tried that, Security Event File move to PFS, logged as Administrator.

And I have check the CIFS Configuration and Managment.

Best Regards.

Then please Open a Service request

Hi, Rainer

Tnak you for your advice.

OK, I'll Open the SR#.

Best Regards.

You have the CIFS service started - right?

Hi, Rainer

Sure, I have checked CIFS server by server_cifs.

And I have connected CIFS share as Administrator before modify AutoArchiveEnable parameter.

Regards.

Hi, Rainer

I have solved this error.

I have change to enabled "Do not overwrite events" on Security Log Properties by Compters Management MMC before  modify Rgestory.

Thank you.

Good to know

Thanks for the feedback

Rainer