From a security standpoint, Vista's increased number of auditable events is excellent, as administrators and compliance officers can get a much deeper picture of the actions taking place on a computer prior to and during a security incident. However, if you are required to retain those security events, either by law or by policy, you need to start budgeting for more storage before you start your Vista and Windows Server 2008 migrations.

Here are a few examples of how Vista security logs tend to grow much more quickly than their predecessors.

At the Dorian Software blog.

[ Read more ]