cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 10

MSSQL Auditor Process FileAuditFailure

Good morning;

We have a machine running the MSSQL Auditor looking at multiple MS SQL servers.

It is failing file audit failures about 8700 times per hour on D:\

The process name: C:\Program Files (x86)\SolarWinds Log and Event Manager MSSQL Auditor\MSSQLAuditor.exe.

I believe the D:\ is the dvd drive on the system which is not mounted at this time.

The ProviderSID is: Microsoft-Windows-Security-Auditing 4656

Can anyone tell us what to look at in MSSQL auditor ?

Thank You

Steve

0 Kudos
2 Replies
Level 11

auditpol /set /subcategory:"Handle Manipulation" /failure:disable

Level 10

tech2734;

Thank You for the reply, I will have to pass to the Widows server admins to have them try this.

sosborne99