Event ID:
10801
Source:
EventSentry
Message:
EventSentry was unable to query the local audit policy settings. A call to query the current audit policy failed with error %1. Please see the EventSentry documentation for troubleshooting advice on this problem.
Solution by Sang Kim
Thu Mar 02 16:09:23 -0500 2006This event is usually logged when the user account the EventSentry service (agent) is running under does not have sufficient permissions to query the local audit policy settings. Querying the audit policy is used for the "Process Tracking" features.
Make sure that the "EventSentry" service is configured to run under a user account that has local administrative permissions and/or permission to query the audit policy.
This event will also be logged for the "Logon Tracking" feature.