Skip to main content

HKLM or HKU Error in Windows Server Auditing Monitoring Plan

Symptom

Netwrix Auditor prompts the following error in the Health Log for the Windows Server Auditing monitoring plan:

Event ID: 1016
Monitoring plan: %monitoring_plan_name%
Item: %server_name%
On %date_stamp%, the following error has occurred while processing %server_name%:
The collector Registry data provider failed while gathering data on the server %server_name% due to the following error: HKLM or HKU
Parameter name: path
Actual value was %value%.

Cause

This is a known issue fixed in the release v10.7.13728.

Resolution

Upgrade your Netwrix Auditor instance to the build v10.7.13728 or later. Download the latest version in My Products · Netwrix.