Forum Discussion

Copper Contributor

Jan 20, 2023

Directory Services Advanced Auditing is not enabled

I have received this alert recently and have tried everything to enable auditing per the recommendation found here https://learn.microsoft.com/en-us/defender-for-identity/configure-windows-event-coll...

MeatHeadPro

Copper Contributor

Jan 23, 2023

I don't know? what is the bug?

Martin_Schvartzman

Microsoft

Jan 26, 2023

MeatHeadPro

The bug (not 100% sure yet) is that the health alert is firing on non-English operating systems (e.g. German) even when the auditing configuration is Ok.

Are your servers configured with a non EN locale?

MeatHeadPro
Copper Contributor
Jan 27, 2023
Martin_Schvartzman
They are not, they are configured for US.
- Martin_Schvartzman
  Microsoft
  Jan 31, 2023
  We're working on fixing this bug. I'll update this thread once I have more information.
  - MichaelDow
    Copper Contributor
    Mar 07, 2023
    Martin_Schvartzmanis this bug also potentially related to the message, Directory Services Object Auditing is not configured as required? We are seeing both of these in our environment despite having configured the policy per the documentation. Thanks!