It's weird - our DCs have been happily supplying UDT with good info for the last year. After testing, we roll out the latest MS updates to our DCs and 4768 just stopped generating on the DC side.
Anyone else seeing this issue?
Thanks!
I wonder if it is a security patch that reverts the setting for that to off...which is the default
Definitely possible - checked GPO results and the right things are enabled in Advanced Auditing. Looks like the basic auditing is enabled for local policy, which shouldn't be. I'm working on getting approval to change the GPO and attempt to correct the behavior.
