Audit failures for tests Process and Registry

All questions related to installations, configurations and maintenance of Advanced Host Monitor (including additional tools such as RMA for Windows, RMA Manager, Web Servie, RCC).
Post Reply
S.
Posts: 1
Joined: Wed Dec 23, 2020 6:34 am
Location: NL

Audit failures for tests Process and Registry

Post by S. »

Hello,

When trying to monitor a workstation (w/local workgroup) outside of our domain,
it looks like all tests run without errors (UNC, Physical Mem, Free space),
yet, some tests give audit failures in event log.

The local workstation is setup in connection manager,.
THis has been tried via IP adress and via hostname (with entry in hosts file).

At this moment this concerns: Process test and Registry test.

Connection manager is setup to perform these test via the user as specified in the connection manager.
Again; other tests do not give these errors in audit log, so I assume the connection manager must be properly setup.

It looks like the test is first executed via the 'default (domain) user', later via the user as specified in the connection manager.
> when started in service mode; error 4625 (Audit failure) in Event log / audit log for "KS Soft - Service account"
> when started in application mode; error 4625 (Audit failure) in Event log / audit log for "my own domain user account"

This gives a lot of audit failures, that should not be there.

Please guide me in setting this up correctly.
Or please, resolve the error.

And let me know if more information is required.

Thank you and best regards,

(Hostmonitor 12.64, windows server 2019 / local workstation=windows 10, v2004; 19041.685)
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

HostMonitor uses only specified account (provides specified account data to Windows API) but Windows API sometimes may try "current" user account.
Sorry, we could not find solution for this Windows problem..
(unless you use remote RMA agent on target system)

Regards
Alex
Post Reply