📄️ Authentication Unsuccessful − Request Did Not Meet
You receive this error when configuring SMTP Notifications if the Microsoft 365 account used for SMTP has multi-factor authentication (MFA) enabled. This article explains the cause and shows how to resolve it by using the direct send method.
📄️ Cannot access roles page
You cannot access the Roles page in the Administrative portals due to an IIS ASP setting. This article explains the cause and shows how to enable buffering to resolve the error.
📄️ Cannot access the Help-Desk portal
If the Help-Desk portal repeatedly prompts for a password even when you enter the correct one, adjust authentication, proxy, and permissions settings as described to resolve the issue.
📄️ Cannot complete login due to an incorrect user nam
Describes the "Cannot complete login due to an incorrect user name or password" error when saving a VMware Virtual Center snapshot in Netwrix Auditor and instructs you to enter credentials for the Virtual Center or ESX(i) server.
📄️ Cannot Copy Snapshot to Long-Term Archive − Access
This article explains how to resolve Event ID 2002 when Netwrix Auditor cannot copy snapshots to the Long-Term Archive due to denied access to the Short-Term Archive path. It outlines symptoms, cause, and step-by-step resolution.
📄️ Cannot obtain credential information for mapped dr
Explains the "Cannot obtain credential information for drive <> mapped by <>" error returned by Netwrix Account Lockout Examiner and what it means.
📄️ Cannot Retrieve Audit Settings in Audit Configurat
When using Netwrix Auditor Audit Configuration Assistant, you may see errors indicating inability to retrieve audit settings or admin audit logging settings due to insufficient permissions.
📄️ Change analysis completed with error: Error saving
Explains how to resolve the error "Change analysis completed with an error: Error saving current VMware Virtual Center snapshot: The server committed a protocol violation. Section=ResponseStatusLine" by updating the Managed Object link to use the Virtual Center server name or IP without a port.
📄️ Classifications for New Categories in OpenText Con
One or more categories were added to folders or documents in OpenText Content Server, but classifications were not written to the documents. Re-index the affected items so the Classifier can update document classifications.
📄️ Client and Server Cannot Communicate, Because They
This article explains the error "The client and server cannot communicate, because they do not possess a common algorithm." and how to resolve it by restoring TLS registry settings so the operating system can select protocols for incoming and outgoing communication.
📄️ Connection failed -0x80070721 - Failed to process
You see the "Connection failed -0x80070721" error when connecting to a remotely installed Netwrix Auditor Client because the Netwrix Auditor Core Service must run under the NETWORK SERVICE account on the server. This article explains the cause and the steps to fix the service account.
📄️ 0x80040605 Error − Connection Failed
Explains how to resolve 0x80040605 "Connection failed" errors in Netwrix Auditor when the target server is unreachable, including likely causes and remediation steps. Provides guidance about required services and disk space considerations for the Long-Term Archive.
📄️ Error 0x800706BA − RPC Server Is Unavailable
Describes causes and resolutions for Error 0x800706BA "The RPC server is unavailable" as reported in Netwrix Auditor Health Log, including firewall, service, DNS, and TLS troubleshooting steps.
📄️ 0x800706D3 Error − Authentication Service Is Unkno
Health Log shows error 0x800706D3 (The authentication service is unknown) for file server monitoring plans in Netwrix Auditor after installing Microsoft updates KB5003646/KB5003638; upgrade to v10.5.11059 or later to resolve the issue.
📄️ Error 403
This article explains causes and resolutions for "Error 403 - Access is denied" when accessing portals in Netwrix Auditor. It shows how to verify IIS SSL and Default Document settings.
📄️ Error: A Required Privilege is Not Held by the Cli
Describes the Event ID 2009 "A required privilege is not held by the client" error in the Netwrix Auditor System Health Log and steps to resolve it when monitoring domain controllers.
📄️ Error: A transport-level error has occurred when s
Explains how to resolve the "A transport-level error has occurred when sending the request to the server" error that appears when assigning users read access to view reports after using the Clear all database entries functionality.
📄️ Error: An Item with the Same Key Has Already Been
When the Overview dashboard shows data but reports return "no data found", you may see an error saving an Active Directory State-in-Time snapshot to the Audit Database. This article explains the symptom, a common cause (duplicate Active Directory objects), and points you to Microsoft guidance for finding and fixing the duplicates.
📄️ Error: An Unknown Error Occurred While Processing
This article explains how to resolve a 500 Server Error (Sys.WebForms.PageRequestManagerServerErrorException) that occurs when running State-in-Time reports with large amounts of data by extending the report timeout on the Report Manager URL.
📄️ Error: "Auditing of Directory Service Access and successful Account Management events is not enabled for this DC"
Explains the cause and resolution for the "Auditing of Directory Service Access and successful Account Management events is not enabled for this DC" warning in Netwrix Auditor, including steps to enable audit policies or suppress the warning via a registry key.
📄️ Error: Cannot Create a Connection to Data Source D
Describe how to resolve the "Cannot create a connection to data source 'DS'" error in Netwrix Auditor by specifying correct credentials for the SQL Server Reporting Services database.
📄️ Error: Certificate With Identifier Is Not Register
Explains the AADSTS700027 certificate error shown in the Health Log for Microsoft 365 monitoring plans and how to resolve it by using separate Entra ID applications in Netwrix Auditor.
📄️ Error: Could Not Connect to Server
This article explains causes and resolutions for the "Could not connect to the server" error when configuring the Netwrix Auditor Audit Database and provides troubleshooting steps for SQL connectivity.
📄️ Error During Agent Operation on Server: No Such Ho
Explains how to resolve the "No such host is known" error reported by Netwrix Auditor when an agent fails to resolve a server name. Provides checks for server names and DNS registration steps.
📄️ Error: Failed to Copy Remote Distributed Modules
Explains why Netwrix Auditor Event Log Manager (ELM) reports "Failed to copy remote distributed modules" when the same server is audited twice and provides options to resolve duplicate audit logs.
📄️ Error: Failed to Load Registry Hive—File Is Used b
This article explains why the registry hive load fails with "The process cannot access the file because it is being used by another process" during Netwrix Auditor data collection and provides step-by-step resolutions, including antivirus exclusions and registry/profile fixes.
📄️ Error: Feature You Are Trying to Use Is on Network
Describes how to resolve "The feature you are trying to use is on a network resource that is unavailable" error during installation or uninstallation of a Netwrix product, including use of the Windows Install and Uninstall Troubleshooter and a manual fix.
📄️ Error: Invalid Login Response in VMware Monitoring
Netwrix Auditor may report "Invalid login response from %URL%" for a VMware monitoring plan. Upgrade Netwrix Auditor to v10.6.12359 or later to resolve the issue.
📄️ Error: Memory Limit Is Reached
Netwrix Auditor logs Event ID 6316 when the memory limit for the Logs Collection Service has been reached for a network device monitoring plan. This article describes the symptom, cause, and steps to resolve the issue.
📄️ Error: Netwrix Auditor Looks Up Additional System
When configuring Oracle monitoring in Netwrix Auditor, you may see an error indicating additional system components and updates are required. This article explains the cause and how to resolve it.
📄️ Error: "No connection could be made"
Explains how to resolve the "No connection could be made" error in the Help-Desk portal caused by mismatched web portal and administrative console versions, and provides a link to download the latest builds.
📄️ Error: No more threads
Shows how to resolve the "No more threads..." connection error from NetWrix Account Lockout Examiner by restarting the WMI service on the target domain controller.
📄️ Error: Request operation timeout
If you receive a "request timeout" error when launching or using Netwrix Account Lockout Examiner, follow these steps to change log collection, disable workstation invalid-logon searches, or limit monitoring to the PDC to resolve the issue.
📄️ Error saving current VMware Virtual Center snapsho
Collections fail with an error indicating insufficient permissions when Netwrix Auditor attempts to save a VMware Virtual Center snapshot. This article explains the required permissions and steps to grant Read-only access.
📄️ Error: Service Did Not Respond to Start or Control
This article describes symptoms, cause, and resolutions for Error 1053 when the SQL Server Reporting Services (SSRS) service fails to start on a Netwrix Auditor server. It explains how to identify SSRS corruption and how to repair or reinstall SSRS to resolve the issue.
📄️ Error: Size of Collected Data Files Exceeded Limit
You may see this Health Log error for a Logon Activity monitoring plan when collected data exceeds size limits. Upgrade Netwrix Auditor to `v10.6.12359` or later to resolve the issue.
📄️ Error: Snapshot Saving Process Was Interrupted
Explains the cause and resolution of the "Snapshot saving process was interrupted" error when collecting snapshot files in Netwrix Auditor, and recommends adding antivirus exclusions.
📄️ ERROR: SQL Error: invalid class
Shows how to resolve the "Invalid class" error when running the Report Configuration Wizard by compiling the SQL Server MOF provider with mofcomp.
📄️ Error: The "Maximum Password Age" is not set
Shows how to resolve the error when Netwrix Password Reset cannot determine the Maximum Password Age and cannot send password expiration notifications.
📄️ Error: "The new task has been created but may not
Explains how to resolve the scheduled task logon session error 0x80070520 by disabling the Windows policy that prevents storing credentials on the affected computer.
📄️ Error: The pipe endpoint cannot be found
You receive the "pipe endpoint cannot be found" error when launching the console or after some time; this article explains the cause and how to resolve it by checking the Netwrix Account Lockout Examiner service and updating the product.
📄️ Error: The Remote Procedure Call Failed
When a monitoring plan health log shows Event ID 5004 with "The remote procedure call failed", follow these troubleshooting steps to determine whether ports, antivirus/EDR, or resource issues on the target system are causing the failure.
📄️ Error When Applying New Wildcard Certificate to SS
Describes an error that occurs when applying a new wildcard certificate to SSRS ('The specified URL was unexpectedly reserved') and steps to unbind the old certificate and bind the new one.
📄️ Certificate Not Registered Error
This article addresses the error message indicating that a certificate with a specific identifier is not registered on the application, providing insights into its cause and resolution steps.
📄️ Failed Logon Attempts after Recent Service Account
Service account generates failed logon events after a password change because collectors did not get updated credentials. This article explains how to update the service account credentials for Event Log Manager, Inactive User Tracker, and Netwrix Password Reset collectors.
📄️ Failed to login by user: <netwrix service account>
You receive the "Failed to login by user: <Netwrix service account>" error when the Netwrix service account lacks permissions on the SQL database. This article shows how to grant the account the required sysadmin role in SQL Server Management Studio.
📄️ Failed to open log
Describes how to resolve the "Failed to open log" error in the Event Log Manager when collecting event logs without agent services. Provides causes and step-by-step remediation including service, network sharing, and firewall settings.
📄️ Group Policy error: is not in a valid format
Explains causes and solutions for the "is not in a valid format" Group Policy error referencing registry.pol files, including how to identify the affected GPO and recovery options.
📄️ How to detect the root cause of multiple failed lo
Explains how to find the root cause when Netwrix Auditor reports many failed logons from a single workstation or server, and lists places to check for outdated credentials.
📄️ How to figure out the IP address used for a failed
Shows two methods to determine the IP address involved in a failed logon attempt: review the original event in Event Viewer and enable writing event descriptions into the database to view details in the Netwrix Auditor console.
📄️ How to Find Destination of Failed NTLM Logons?
Shows how to locate the origin of failed NTLM logon attempts by temporarily enabling NTLM auditing on a Domain Controller and how to revert the change.
📄️ How to Investigate Compression Services Errors
Describes how to troubleshoot compression service errors such as "Compression service is unavailable" and "Unable to update the Compression Service" in the Netwrix Auditor health log.
📄️ I cannot see SQL changes made in my third-party ap
Explains why changes made inside an ERP application's internal database are not reported by SQL Server Auditing and how this behavior affects Netwrix Auditor. Clarifies that application-level changes do not affect SQL Server instance properties and therefore are not tracked.
📄️ Insufficient memory and not enough storage errors
Explains causes and resolutions for "Insufficient memory" and "Not enough storage" errors when running Netwrix Event Log Manager, including how to adjust Windows performance settings.
📄️ Invalid Character Value for Cast Specification Err
Netwrix Auditor fails to store audit data and reports "Invalid Character Value for cast specification." This article explains causes and provides two workarounds to restore data collection without data loss.
📄️ Investigating Failed Logons
Shows how to investigate repeated failed logons and identify their source using Event Viewer XML queries, Netwrix Auditor search, local audit policy, and NetLogon debugging.
📄️ KDS Removal Tool for ADV-2023-003 Failed to Load C
If the KDS Removal tool (NetwrixAuditorKDSRemoval) cannot find Configuration.xml and shows "Failed to load configuration file. Could not find a part of the path", follow these steps to point the tool to the correct Working Folder path or DataPathOverride registry key.
📄️ Message Size Exceeds Fixed Maximum Message Size Er
Explains causes and resolutions for "Message size exceeds fixed maximum message size" errors in the Health Log when Netwrix Auditor cannot send email reports. Provides steps to compress attachments, change subscription file format, and verify the Exchange server.
📄️ NetApp Clustered Data ONTAP Error Resolution Guide
This knowledge base article provides a comprehensive guide to troubleshooting common errors encountered when configuring and using NetApp Clustered Data ONTAP with Netwrix Auditor.
📄️ Netwrix Auditor Data Collection Account: Failed Lo
Explains causes and resolutions when the Netwrix Auditor Data Collection Account produces failed logons or gets locked out, with steps to update credentials across monitoring plans, custom accounts, SQL/SSRS settings, services, and supplemental collectors.
📄️ Netwrix Auditor Failed to Collect the Administrato
This article explains how to resolve the "Failed to collect the Administrator audit log" error in Netwrix Auditor caused by an invalid domain name format. It shows how to update the domain to FQDN format in the monitoring plan.
📄️ Permission denied, error code -2146828218
Explains why non-admin users receive "You do not have a Helpdesk operator permissions" or "Permission denied" (error code -2146828218) when accessing the Help-Desk portal, and shows how to grant the Help-Desk Operators role and verify IIS authentication settings.
📄️ rsCannotValidateEncryptedData — Unable to Validate
Describes causes and remediation steps for rsCannotValidateEncryptedData and related encryption key errors in SQL Server Reporting Services, including restoring a backup encryption key or deleting encrypted content and restarting services.
📄️ Specified Logon Session Does Not Exist Error in Ne
Explains how to resolve the "A specified logon session does not exist" error when enabling the Leverage Integration API in Netwrix Auditor by assigning a new SSL certificate.
📄️ Specified Network Name Is No Longer Available Erro
This article explains the "The specified network name is no longer available" error (Event ID 5037) that can appear in Health Log for a Logon Activity monitoring plan in Netwrix Auditor and provides steps to diagnose and resolve it, including commands to review and rename domain controller computer names and update DFSR objects.
📄️ System Cannot Find the Path Specified in Logon Act
A Logon Activity monitoring plan fails with Event ID 5004 and the error "The system cannot find the path specified", preventing data collection. This article explains the cause and provides steps to upgrade or repair Netwrix Auditor to resolve the issue.
📄️ The Remote Procedure Call Failed Error When Collec
This article explains causes and resolutions for the "The remote procedure call failed and did not execute" error that can occur when Netwrix Auditor collects logs from target systems. It lists possible causes related to firewall, permissions, and RPC server availability and provides links to further guidance.
📄️ Transport Failed to Connect to Server
This article explains why the "The transport failed to connect to the server" error appears when testing Notifications in Netwrix Password Reset and provides step-by-step resolutions to restore email notifications.
📄️ TS collection failed warning
Explains the "TS collection failed: Can't open output file" permission denied warning for Windows Server 2008 domain controllers and provides steps to resolve it for Netwrix Auditor.
📄️ Unable to Process Item Error when Using gMSA in Ne
Explains logon/impersonation errors encountered when using group Managed Service Accounts (gMSA) with Netwrix Auditor and provides causes and upgrade-based solutions.
📄️ "Vserver API missing vserver parameter" error when
Explains how to resolve the "Vserver API missing vserver parameter" ONTAPI error that prevents NetApp cluster auditing in Netwrix Auditor.
📄️ [WARNING] The following error occurred when trying
Explains how to resolve the "[WARNING] The following error occurred when trying to perform automatic audit configuration" message in Netwrix Auditor change summary emails and System Health logs, and provides two options to fix the issue.
📄️ Weak Password Job Errors
This article addresses the error encountered when the Active Directory > 2.Users > AD_WeakPasswords job fails due to a missing assembly file.
📄️ Why Do I Have Incomplete Information on Failed Log
Explains why failed logon entries in Search Results or Reports may lack information in the What field. Describes how Windows event types for workstations and domain controllers affect the available data and links to investigation resources.
📄️ WMI Classes Data Provider Failed − Service Cannot
Netwrix Auditor Health Log can show Event ID 1016 when the WMI Classes data provider cannot query Win32_SystemSlot because the Windows Management Instrumentation service is stopped. This article describes the cause and steps to start the service to restore data collection.
📄️ WMI Classes Data Provider Failed to Get the Inform
Explains the cause and resolutions for Event ID 1016 where the WMI Classes data provider cannot get Win32_Printer information; includes steps to start the Print Spooler service and alternatives to omit printer monitoring.