I am really perplexed, the audit status is showing access denied, and connection is in ok state. The system has been working for months and now it just stops... what could it be?
Audit Status Access Denied but Connection OK
Posted 16 November 2015 - 01:50 PM
Audit Status is the result of reading local policy on the domain controllers to see if Logon Auditing is enabled. If it was able to check it before and isn't now then that means the account was removed from Manage Auditing and SEcurity log rights on the domain controllers, removed from a group which had this right or UAC was enabled where it wasn't previously. The ability to check audit status does not affect product functionality unless of course it also lost rights to read the security event logs as well but in that case connection status would likely not be OK.