Unsolved
This post is more than 5 years old
Moderator
•
751 Posts
1
1439
June 12th, 2012 03:00
AutoArchiveEnabled Parameter can't change to Enable
Hi All,
I have tried to change CIFS Audit log configuration.
The parameter is AutoArchiveEnabled, change "0"(disable) to "1"(enabled) by regedt32.
But I can't change the parameter, got error message is "AutoArchiveEnabled can't modify"
How can I use Log AutoArchive function?
Regards.
No Events found!
Rainer_EMC
6 Operator
•
8.6K Posts
0
June 12th, 2012 05:00
Did you first “move” the event log to another file system so that its no longer on the rootfs ?
That is a requirement for AutoArchiveEnabled (see the manual)
Are you logged in / connected as a user that is a member of the CIFS servers local Administrator group ?
Nori_Ishitsuka
Moderator
•
751 Posts
0
June 12th, 2012 17:00
Hi, Rainer.
Yes, I have tried that, Security Event File move to PFS, logged as Administrator.
And I have check the CIFS Configuration and Managment.
Best Regards.
Rainer_EMC
6 Operator
•
8.6K Posts
0
June 13th, 2012 01:00
Then please Open a Service request
Nori_Ishitsuka
Moderator
•
751 Posts
0
June 13th, 2012 05:00
Hi, Rainer
Tnak you for your advice.
OK, I'll Open the SR#.
Best Regards.
Rainer_EMC
6 Operator
•
8.6K Posts
0
June 13th, 2012 11:00
You have the CIFS service started - right?
Nori_Ishitsuka
Moderator
•
751 Posts
0
June 13th, 2012 16:00
Hi, Rainer
Sure, I have checked CIFS server by server_cifs.
And I have connected CIFS share as Administrator before modify AutoArchiveEnable parameter.
Regards.
Nori_Ishitsuka
Moderator
•
751 Posts
0
June 18th, 2012 01:00
Hi, Rainer
I have solved this error.
I have change to enabled "Do not overwrite events" on Security Log Properties by Compters Management MMC before modify Rgestory.
Thank you.
Rainer_EMC
6 Operator
•
8.6K Posts
0
June 18th, 2012 23:00
Good to know
Thanks for the feedback
Rainer