Forum Discussion
Directory Services Advanced Auditing is not enabled
I have received this alert recently and have tried everything to enable auditing per the recommendation found here https://learn.microsoft.com/en-us/defender-for-identity/configure-windows-event-coll...
Martin_Schvartzman
Microsoft
MicrosoftI apologize, the fix (non-English operating systems, and schemas earlier than 87) in v2.201 is for the Directory Services Object Auditing health alert, and not for the Directory Services Advanced Auditing health alert as you initially reported.
Could you please open a support ticket and share more details on the problem you are facing?
The issue was fixed with MS support help.
@TaurusTec Hi, how are you doing?
The solution described by @Arngrimur Magnusson solved the issue for your case? (Enabling the full controll on step 9.e from the official documentation https://learn.microsoft.com/en-us/defender-for-identity/deploy/configure-windows-event-collection#configure-domain-object-auditing ?)
- TaurusTec The solution was to follow this guide here
https://learn.microsoft.com/en-us/defender-for-identity/configure-windows-event-collection#configure-domain-object-auditing
And in step 9.e. set permission to "Full control" starman2hevencould you elaborate on the solution please?
terryhugill can you share solution?
- Could you shed any light on the fix? I am going to re-check my customer's config, but I am confident it's correctly configured
