Configure security log size and retention settings

    • Open GPMC → Edit the <ADAuditPlusFSPolicy> GPO → Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Event Log.
    • Configure Retention method for security log to Overwrite Events As Needed.
    • Configure the Maximum security log size as defined below. Ensure that the security log can hold a minimum of 12 hours worth of data.
    Configure event log settings
    Role Operating System Size
    Windows File Server Windows Server 2003 512 MB
    Windows File Server Windows Server 2008 and above 4096 MB