Hi Team I have enabled security auditing in AD and lots of event logs are generated. How to extend the Windows security logs for 10-12 days so that I can check who has made any changes in GP and what was changed?Regards Suman B. Singh

Hi, What is the OS version of the computer? You can consider increasing the Maximum log size or changing the overwrite settings: Refer to: Start --> Run --> EVENTVWR.MSC --> Right click Security log, go to Properties. Then, you can increase the Maximum log size. If Windows Server 2008 is installed, you can choose “Achieve the log when full, do not overwrite events”. If Windows Server 2003 is installed, you can choose “Overwrite events older that X days” Thanks. NinaPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.