8 replies to this topic

[Allsolution]

Hello I'm new here. I installed netwrix auditor file server change reporter and trying get report

 

I found this error:

2/13/2018 10:43:04 AM: FILESERVER: Error while exploring server file shares on FILESERVER: Access is denied
2/13/2018 10:43:06 AM: \\FILESERVER\FILES: Access is denied
2/13/2018 10:43:09 AM: FILESERVER: Failed to open log 'security' (API used: NT). Error details: Access is denied. (Error number: 0x80070005) -2147024891

What settings should I set on shared folder?

Please help me to solve my problem

 

 

 

 

 

[Jadentek]

Similar issues corrected in KB1626 Failed to open log https://www.netwrix.com/kb/1626

 

This error usually appears when Event Log Manager is configured to collect event logs without agent services (i.e. network traffic compression option is turned off).
Generally there are few reasons why this error appears:

1. The problematic server is turned off or not accessible through the network.
2. The "Server" service is stopped on the problematic server.
3. The "File & Printer Sharing for Microsoft Networks" feature is turned off in the Local Area Connection properties.
4. The remote connection is blocked by "Windows Firewall".

 

 

 

.

[netwrixuser3]

Have you managed to solve this? Have the same problem. 

 

http://forum.netwrix...?showtopic=3554

[Kirill K]

Hi everyone,

 

usually "Access Denied" is caused by missing permissions or firewall, so these two points should be checked at first, if you have the problem so far, let us know.

[netwrixuser3]

Missing permissions where? As I described in my topic, there is no problem with firewall, problem is on the machine. Firewall rule comes with gpo and works on other same server with same settings. Cand find that difference which causes error. 

[Kirill K]

Assign local Administrators membership directly on the target server with the data processing account, if it does not help try to disable firewall only on the problematic server.

[netwrixuser3]

That is assigned, data collecting account is domain admin (also local)

[Kirill K]

Well, the last thing to check is firewall, disable it for test purpose and check if it does help.

[netwrixuser3]

Turned off and it didnt help. Same error still exists. What could it be else?