📄️ Cannot Establish a Connection to a Windows File Se
Explains how to resolve the "Cannot establish a connection to a Compression Service (0x80070424)" error in Netwrix Auditor for File Servers by enabling the Remote Registry Service and rebooting the Netwrix Auditor server.
📄️ Child Item with This Name Already Exists in File S
This article describes how to resolve the Health Log error "Data collection has failed. Error: A child item with this name already exists" for a File Server monitoring plan in Netwrix Auditor.
📄️ Error: Netwrix Auditor for File Servers Audit Serv
Describes how to resolve the "Netwrix Auditor for File Servers Audit Service terminated unexpectedly" error by removing the FileStorageAuditor working folder, clearing crash dumps, and upgrading to a newer build.
📄️ File Servers — Security Descriptor of File Share I
Describes Event ID 6131 "The security descriptor of the file share is empty" and provides troubleshooting steps to restore share and NTFS permissions so Netwrix Auditor can access the file share.
📄️ How to audit File Servers with enabled User Accoun
Explains why Netwrix Auditor cannot configure audit settings for file server managed objects when User Account Control is enabled and how to resolve the issue.
📄️ How to change the frequency of data collections fo
Explains how to modify the scheduled Task Scheduler job used by Netwrix Auditor to change the frequency of data collections for File Server auditing.
📄️ How to enable item level auditing on multiple file
Use the provided PowerShell script to enable item-level auditing on multiple file servers. Edit `line #19` to set the target OU and domain, then run the script under a domain admin account.
📄️ Netwrix Auditor for File Servers Audit Service Sto
This article helps you resolve an issue in Netwrix Auditor 10.5 builds 10936 and 10942 where the File Servers Audit Service stops shortly after startup. It provides the required pre-upgrade steps and the upgrade workflow to restore normal operation.
📄️ Netwrix Auditor for File Servers reports excessive
Netwrix Auditor may report excessive file read attempts when Windows thumbnail previews cause the icons cache to be overwritten. This article explains why this happens and shows the Group Policy settings you can enable to reduce those read attempts.
📄️ Symbolic Link Cannot Be Followed Error in File Ser
This article explains how to resolve the "The symbolic link cannot be followed" (0x80049610) error that appears during State-in-Time data collection for a File Server monitoring plan. It shows how to check and enable symbolic link evaluation settings using fsutil on the Netwrix Auditor server.
📄️ The disk on a monitored file server is overfilled
Describes causes and resolution steps when a monitored file server disk is filled by Security event log auto archives.
📄️ This Shared Resource Does Not Exist Error in File
Explains how to resolve the "This shared resource does not exist" (0x80070906) error in a File Servers monitoring plan in Netwrix Auditor, including causes and step-by-step resolutions.
📄️ Types of the data collection for File Servers audi
Explains the two types of data collection for File Servers auditing in Netwrix Auditor: the default Enhanced mode and the Basic mode (Large Server Support).
📄️ Unexpected End of File Error in File Server Monito
Explains how to resolve "Unexpected end of file" errors (EventIDs 2002 and 2004) in Netwrix Auditor file server monitoring plans caused by missing permissions on the Microsoft Link-Layer Discovery Protocol driver.
📄️ Volume Shadow Copy Service support in Netwrix Audi
Explains how to enable Volume Shadow Copy Service (VSS) support in Netwrix Auditor and where Shadow Copy data is stored. Shows the steps in the Netwrix Auditor UI and clarifies that snapshot data is stored on the audited file server.
📄️ What Is SessionID in Netwrix Auditor for File Serv
Explains what the SessionID attribute represents in Netwrix Auditor for File Servers and how it helps distinguish events and changes within a user's logon session.