Event submitted by Sang Kim
Event ID:
10802
Source:
EventSentry

Message:
EventSentry has determined that the currently active Audit Policy does not audit "Process Tracking" and EventSentry is NOT configured to activate "Process Tracking". You will either need to activate Process tracking manually by launching "Start -> Programs -> Administrative Tools -> Local Security Settings -> Local Policies -> Audit Policy -> Audit %3 = Audit Success", activate %2 tracking in Active Directory or configure EventSentry to activate "Process Tracking" for you.




Solution by Sang Kim

2006-03-02 16:24:29 UTC

This event is logged by EventSentry because the current audit policy settings, which are a prerequisite for Process Tracking, are not active. Process Tracking will most likely not work correctly since EventSentry's tracking features depend on the OS writing process and/or logon events to the security event log.

You can configure the audit policy manually as instructed in the description or configure EventSentry to change the audit policy at "Packages -> Tracking Packages -> Package Name -> Processes -> Tracking Details".

This event will also be logged for the "Logon Tracking" feature.



User Information
 
Only an Email address is required for returning users.

Hide Name

Solution

Additional Links