MonitorWare Knowledge Base

Hello,

I am running Windows 2000 Server (SP3) and Exchange 2000
on my pilot box at home. In the c:/winnt/security/logs
subdirectory there is a log file called scepol.log that is
huge, 126Meg, and "is in use by another program," so I
can't manually delete it. I vaguely remember turnign
something on when I installed this October 2001!

[Beginning of log sample]

----------------10/13/2001 12:56:27
Thread e4 Initialize NotificationQSync
Thread e4 Entered NotificationQSync for
unflushing queue
Thread e4 Leaving NotificationQSync for
unflushing queue
Thread e4 Unflush Notification Queue
Thread e4 Successfully created event
E_ScepNotificationQEnqueue
Thread e4 Successfully created event
E_ScepPolicyPropagation

[End]

It obviously is not part of event veiwer logs. I'm not
sure it has anything to do with exchange.

I would like to put a cap on the file size, or turn it off
altogether.

My office installation, the production server, has the
same file but is extremely smaller.

Thanks for the effort in advance.

Very truly yours,

Mark Ryan, DDS

http://support.microsoft.com/?kbid=277675 describes how to switch this
log file on (with a registry change). (So I guess you can figure out
how to turn it off).

Apparently it's logging calls to the Local Security Authority API.

Unless your having LSA problems, I guess you can turn it off.

Regards,

Chris.

Someone has enabled LSA debug logging. See

http://support.microsoft.com/?kbid=277675

and change debug level (or remove the key, I guess - logging isn't default)
to stop logging. Restart will be required.

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-