Unable to log events to security log getting event ID 512 in all domain controller

chandrasekaran k 1 Reputation point
2021-03-04T15:14:40.973+00:00

Log Name: Security Source: Security Date: 2021-03-04 6:24:29 AM Event ID: 521 Task Category: System Event Level: Information Keywords: Classic,Audit Success User: SYSTEM Computer: system Description: Unable to log events to security log: Status code: 0x80000005 Value of CrashOnAuditFail: 0 Number of failed audits: 1 <Provider Name="Security" /> <EventID Qualifiers="0">521</EventID> <Level>0</Level> <Task>1</Task> <Keywords>0xa0000000000000</Keywords> <TimeCreated SystemTime="2021-03-04T13:24:29.000000000Z" /> <EventRecordID>200543</EventRecordID> <Channel>Security</Channel> <Computer>system</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data>0x80000005</Data> <Data>0</Data> <Data>1</Data> </EventData> </Event>

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,898 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2021-03-04T15:20:55.623+00:00

    Might try clearing the log or its also possible the ETVX is corrupt. In this case set the Event Log service startup to Disabled, reboot, delete corrupt EVTX from \Windows\System32\winevt\Logs then set the set the Event Log service startup to Automatic, reboot

    --please don't forget to Accept as answer if the reply is helpful--