problem using dumpel to remotely backup an AD's event log

  • Thread starter Thread starter Keith Langmead
  • Start date Start date
K

Keith Langmead

I'm trying to create a script which will use dumpel, to go through and
remotely archive all of our live servers on a domain to a central location,
which I'll then automatically download to our local network, so we have a
copy of all the security logs away from the servers in case we need them.

I'm using the following line for each server :

"%dumpeldir%dumpel" /l security /f "e:\security logs\auth-01-sec.out" /s
auth-01 /c

For all the other servers it works fine, however on the Auth servers (AD
controllers) , I get the error message "LookupAcountSid failed with 1788."
display constantly until I kill the script.

The server I am running the script from is a AD member server.

Does anyone know what is causing this to happen? I'm guessing that either it
won't work on an AD controller, or it simply doesn't like it being done
remotely. Can anyone help?

Cheers
Keith
 
Back
Top