
Auditing of Directory Service Access and successful Account Management events is not enabled for this DC
Started by
Sebastien
, Jun 24 2013 01:24 PM
3 replies to this topic
#1
Posted 24 June 2013 - 01:24 PM
Hello all,
I'am actually trying ADCR and I got this error message :
Auditing of Directory Service Access and successful Account Management events is not enabled for this DC. Adjust the audit policy settings using the Active Directory Audit Configuration wizard or see the product documentation for more information
I check all my GPO and "Directory Service Access" and "Account Management events" are correctly trim. Why I obtain this message?
Thanks in advance!
Regards,
Sébastien
I'am actually trying ADCR and I got this error message :
Auditing of Directory Service Access and successful Account Management events is not enabled for this DC. Adjust the audit policy settings using the Active Directory Audit Configuration wizard or see the product documentation for more information
I check all my GPO and "Directory Service Access" and "Account Management events" are correctly trim. Why I obtain this message?
Thanks in advance!
Regards,
Sébastien
#2
Posted 25 June 2013 - 12:32 PM
Hello all,
I'am actually trying ADCR and I got this error message :
Auditing of Directory Service Access and successful Account Management events is not enabled for this DC. Adjust the audit policy settings using the Active Directory Audit Configuration wizard or see the product documentation for more information
I check all my GPO and "Directory Service Access" and "Account Management events" are correctly trim. Why I obtain this message?
Thanks in advance!
Regards,
Sébastien
Sebastien,
A few questions that will help.
1) If you run RSOP on one of these servers what results do you see for these two audit settings?
2) If you run secpol do you see the same results?
3) Do you use advanced auditing configuration (Windows Server 2008 R2)?
Thanks,
Jeff
#3
Posted 26 June 2013 - 01:28 PM
Hello jeffb,
I used secpol and rsop as you proposed. In fact, the DC GPO was not set on the DC : If I disabled my customized DC GPO and set values directly by secpol, it work fine.
Thanks for your help!
Sébastien
I used secpol and rsop as you proposed. In fact, the DC GPO was not set on the DC : If I disabled my customized DC GPO and set values directly by secpol, it work fine.
Thanks for your help!
Sébastien
#4
Posted 26 June 2013 - 03:30 PM
Sebastian,
It is no problem. Thank you for reaching out!
It is no problem. Thank you for reaching out!