The Crash On Audit Fail registry key located at HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlSet\Control\LSA\CrashOnAuditFail is primarily used to enhance the security of your computer system. The key enables you to disallow access to the users whom you don’t want to access your critical data. While CrashOnAuditFail provides advanced security to your data, it might also result in a STOP error message. This STOP error message halts the bootup process and makes all data inaccessible to you. To restore the lost data, you should use an up-to-date data backup. But, in the absence of such backup, you need to opt for efficient Partition Recovery tools.

As a practical example, a STOP error message appears in Windows XP, 2003 or 2000 systems, after the security log is full and the CrashonAuditFail registry key is set to ‘1’:

“STOP: C0000244 {Audit Failed} An attempt to generate a security audit failed.”

Cause:

The above STOP error primarily occurs because the Security Log has reached the Maximum Log Size specified, and Event Log Wrapping is set for "Overwrite Events Older than (X) Days."

Another major reason for the above error message can be the selection of "Do Not Overwrite Events". Because the Security Event Log is full and the CrashonAuditFail registry key is set to ‘1’, Windows operating system displays a STOP 0xC0000244 error message.

Resolution: To resolve the above issue, you need to follow any of the below available options: • Set "Overwrite Events as Needed" for the Event Log Wrapping. • Reduce the quantity of information being audited. • Increase the log file size and use a grouping of the previous options listed above. • Disable auditing. However, if the options discussed above do not resolve the issue, then you need to opt for a clean reinstall of Windows operating system. A clean reinstall completely erases all data from the selected hard drive partition. In such file loss scenarios, you should go for powerful File Recovery software. A File Recovery utility performs comprehensive scan of your formatted hard disk partition by incorporating powerful scanning methods. Such recovery utilities are easy to use and implement due to their largely graphical and self-descriptive user interface.

Stellar Phoenix Windows Data Recovery Software is the most efficient Partition Recovery application that ensures complete recovery from corrupted, deleted, formatted or lost partitions and volumes. This read-only recovery tool supports FAT16, FAT32, vFAT, NTFS and NTFS5 file systems based Windows partitions and volumes. It is compatible with Windows Vista, XP, 2003 and 2000.

Author:-K MADHAV
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
  • Furl
  • Reddit
  • Spurl
  • StumbleUpon
  • Technorati