Event submitted by Sang Kim
Event ID:
10801
Source:
EventSentry

Message:
EventSentry was unable to query the local audit policy settings. A call to query the current audit policy failed with error %1. Please see the EventSentry documentation for troubleshooting advice on this problem.






Solution by Sang Kim

2006-03-02 16:09:23 UTC

This event is usually logged when the user account the EventSentry service (agent) is running under does not have sufficient permissions to query the local audit policy settings. Querying the audit policy is used for the "Process Tracking" features.

Make sure that the "EventSentry" service is configured to run under a user account that has local administrative permissions and/or permission to query the audit policy.

This event will also be logged for the "Logon Tracking" feature.



User Information
 
Only an Email address is required for returning users.

Hide Name

Solution

Additional Links