The W2k server (domain controller) wont allow any attempts
to login. There is a message saying that the eventlog is
full. Can't login in any failsafe mode. Started with CD
and entered rescue mode.

Is it possible to delete the .evt files directly in "DOS"-
mode or does it have to be doen with some tool?

Can the .evt files be renamed to avoid the problem?

Hi,

logon to any windows server and open Computer Management Console (Start ->
Run -> compmgmt.msc and click OK). On the Computer Management (Local) right
click and select connect to another computer and enter the domain controller
name. Once you are connected you can drill down to event log and save logs
to different location, empty them, reserve more space for logs etc...

Mike

wrote in message
news:2438b01c45f4d$cd8ae950$a401280a@phx.gbl...
> The W2k server (domain controller) wont allow any attempts
> to login. There is a message saying that the eventlog is
> full. Can't login in any failsafe mode. Started with CD
> and entered rescue mode.
>
> Is it possible to delete the .evt files directly in "DOS"-
> mode or does it have to be doen with some tool?
>
> Can the .evt files be renamed to avoid the problem?
>
>

You should be able to logon after Mike's suggestion. Then see the link below on
what security option to disable in Domain Controller Security Policy. --- Steve

Shut Down the System Immediately if Unable to Log Security Audits ---
**DISABLE THIS OPTION**

http://www.microsoft.com/technet/Security/prodtech/win2000/win2khg/05sconfg.mspx

wrote in message
news:2438b01c45f4d$cd8ae950$a401280a@phx.gbl...
> The W2k server (domain controller) wont allow any attempts
> to login. There is a message saying that the eventlog is
> full. Can't login in any failsafe mode. Started with CD
> and entered rescue mode.
>
> Is it possible to delete the .evt files directly in "DOS"-
> mode or does it have to be doen with some tool?
>
> Can the .evt files be renamed to avoid the problem?
>
>