Have a requirement to place Security Event Logs on a separate partition (F:) on 2008 R2 plaform. Applied the method of editing the Event Log File, using Regedit, as performed in previous 2003 server; however, does not redirect logs to new directory. Method used that works with 2003 and not 2008: 1. Run regedit 2. Locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentCOntrolSet\Services|Eventlog 3. Click Security subkey 4. In right pane, double click File 5. Enter complete path to new directory. In my case, F:\Logs\SecEvent.EVT for 2003 and F:\Logs\Security.evtx for 2008. 6. Exit Thank you in advance, Robert Jay

Hi Robert, After editing the registry, please also copy the Security.evtx from %SystemRoot%\System32\Winevt\Logs to the new locationMoreover, open Event Viewer, expand Windows Logs, right click Security, click Properties, then change the Log path to the new location as well, click OK. Then you should be able to write logs to the new location. Best Regards DalePlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thank you, kindly! RJ