10803EventSentryEventSentry determined that "Process Tracking" is currently not enabled and was unable to activate it. A call to change the current audit policy failed with error %1. Please see the EventSentry documentation for troubleshooting advice on this problem.
This event is logged by EventSentry because it was unable to activate the required audit policy for either Process or Logon Tracking. The error is usually due to the user account the EventSentry service (agent) is running under not having sufficient permissions. Please examine the error message returned by the OS to troubleshoot this problem.
Make sure that the "EventSentry" service is configured to run under a user account that has administrative permissions or manually change the audit policy by launching "Start -> Programs -> Administrative Tools -> Local Security Settings" and navigating to "Local Policies -> Audit Policy".
This event will also be logged for the "Logon Tracking" feature.