Windows 10: Windows 11 Event log security full daily - cannot login

We have two new Windows 11 PCs on our domain that Event log Security is full daily - cannot login - configure to overwrite - issur returns in 24 hours - full log - no logon. Configured as Admin - issue repeats in 24 hours

:)

 

Events 4672 & 4624 Win 10 Freezes - special LOGON ?

Hi,

Thank you for writing to Microsoft Community Forums.

1. Are you on a domain network?
   
2. May I know the make and the model number of your system?
   

The event logs you have provided seems to be the security logs that is generated when you login to your system. For more information on the event that was generated, you can check
4672(S): Special privileges assigned to new logon.

The Windows error logs will be located at Event Viewer > Windows Logs > System.

Please follow the step below and check if it works for you.

Step: Improve Windows 10 Performance.

Try some of the following suggestions to help
make your Windows 10 PC run better. The steps are listed in order, so start with the first one, see if that fixes the problem, and then continue to the next one if it doesn’t.

Note: The last step on the article contains Windows Reset, I suggest you not to perform Windows reset, as there is a change your data and applications will be wiped and also
the OS will reverted back to previous version you upgraded from.

If the issue still persists, please reply to this post with more information so that we can identify the root cause of this issue and assist you further.

Hope it helps.

Amit Sunar

Microsoft Community – Moderator

 

problem filtering out login events in security log

Would like to see if there are any remote logins on my system. I brought up the security log but there are so many logins it is not possible to spot anything unusual. I assume the majority of login are something internal to windows and I would like to
filter those out if possible.

I clicked on "filter" to see what options there are and the snap-in died as shown in the image below.

In looking through the security log, I see "logon:" followed by "special logon" There are too many of them to be a login from a 3rd party unless all of china is accessing my computer.

How can I filter out logon events that are windows internal to make it easier to see 3rd party login.

I do check "sessions" under shares for remote access periodically. The following error popped up when I clicked on "filter"

 

Won't sync daily events or any of today's events/appointments

I cannot get MyPhone to pick up the daily 0800-0900 Task event on my Calendar, which contains a Note with a list of to-do's which I edit daily as I complete some and add more. It also failed to sync any of my scheduled events/appointments I had on my
HTC TP2's Calendar for today, 11/24/09. Strange. I don't trust this as a backup system for my phone. Help, please? Thanks. Albert