Absurd Number Of Event ID 1107

H

hh.ng

Hi Everyone!

Need help/advice on this as I'm unable to find a solution after searching the forum for the past month

I have this peculiar issue of this event in my Windows Server 2016 Security logs. It is filling up my event log till the point that 800K+ of events are the same. Only both Pri and Sec AD exhibit this issue.

Of all the posts I viewed, most of it will state the event publisher name but in my case it is empty! I have even tried to stop or uninstall suspected services and software but no avail.

Getting stressed as this causes me not able to see user account login/lockout success/failures events, and these events are important for our InfoSec audits.

Hope someone can point me to the right solution. Thanks!


1461800.png

1461799.png

1461801.png

Continue reading...
 
Back
Top Bottom