Hello, I'm Rodrigo from Chile, please your help:
I have a 2008 R2 SP1 Fileserver, works correctly time ago, but now the server not do not show the users who make changes in the shared folders.
The Events ID are 6128:
And the 6131.
Time ago, this works fine, but not now.
- The user who make the audit, is local administrator of the machine, and AD Administrator.
- The Server service is OK.
- The Netwrix has the last version (9.6).
- The Netwrix KB do not have this Events ID.