Hi, Regarding your question, please understand that the Maximum event log size policy settings specify the maximum size of the application, security, and system logs. And the Retain log policy settings determine how many days worth of events to retain, if the retention method specified for the log is By Days. When event logs fill to capacity, entries can no longer be written to them unless the retention method for each is set so that the system will overwrite the oldest entries with the most recent ones. The risk of the event logs not containing recent entries can be mitigated by setting the retention method so that older events are overwritten as needed. The consequence of this action is that older events will be removed from the logs. If we archive the log at scheduled intervals, in the property sheet for this policy setting, specify the appropriate number of days and select Overwrite events by days for the event log retention method. Also, ensure that the maximum log size is large enough to accommodate the amount of information we want to gather during the archive interval. For details about the Event Log policy setting, wed better refer to the following article, we will have a better understanding of the Group Policy. Event Log Policy Settings http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx Regards, Andy

Hi, DC - Window Server 2008 Std R2 Client - Window 7 and Window XP Please let me know your opinion, is it ok to keep this type of setting for Log files. Please see the below print-screen What setting will take place - 'Maximum log file size is 1 GB' and I have also kept Retain Log to 30 days' which will take preferenceThanks & Regards, Param www.paramgupta.blogspot.com