9 replies to this topic

[netwrixuser3]

Hello everybody,

 

*the following error has occurred while processing '#1': 

The following error has occurred while collecting data from the log Setup: Failed to open log 'Setup' (API used: Vista). Error details: Access is denied. (Error number: 0x80070005)

 

I am facing this error only on one server, tried all possible ways and nothing changes. Can you, please, help me? To exact things, I have same server #2, data collecting works fine for it. Same configuration as on #1. Can't see anything. 

Someone said it's similar with https://www.netwrix.com/kb/1626, but everything listed there is configured right. 

Netwrix has domain admin rights, firewall exception (just in case, for any connections), necessary gpo keys and etc.

 

Software is up-to-date, last version

[Kirill K]

Hi there,

 

1. Make sure data processing account has local Administrators group membership on the target host

2. Disable windows firewall on the target host, if it does help configure necessary rules according to https://helpcenter.n...orts_Intro.html

[netwrixuser3]

1. It's ok

2. Will check by disabling, but it is not solution for me. No need for that configuration, for Netwrix machine there is 1configure rule -> allow any any any any  

[Kirill K]

It is only needed to isolate the cause, then depending what is not working, should be changed the rules or whatever else.

[netwrixuser3]

Turned off and it didnt help. Same error still exists. What could it be else? 

[Kirill K]

Run the following command on the target server and attach the result:

gpresult /h c:\gpolist.htm

[netwrixuser3]

here it is. thanks

[Kirill K]

I checked the report and did not find anything wrong, so far I do believe the issue caused by the firewall.

 

Please use telnet etc. to check opened ports between Netwrix and target hosts, the communication between hosts is established via ports specified at the section "13. Event Log", here is link of the article 

https://support.micr...nts-for-windows

[netwrixuser3]

As I mentioned earlies, there is same top rule for these servers - "accept any any any from netwrix". 
Checked ports also, same raction on both servers, nothing different. 

[Kirill K]

I am running out of ideas, I think you may also raise Microsoft ticket to investigate the issue.