Forum Discussion
Microsoft Policy Analyzer 4.0 crashes after apply April updates
I'll try posting it as an image instead:
The problem is that with the April 8 2025 updates Microsoft added a new Advanced Auditing subcategory and mistakenly assigned it the same GUID that is already assigned to another subcategory. That's a bug in Windows -- those GUIDs need to be unique to configure auditing. The bug in Policy Analyzer appears to be that it assumes there are no duplicates and fails to check for them (which it had never needed to before).
The new Advanced Auditing subcategory is represented in the registry key, HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Audit\SystemPolicy\LogonLogoff\AccessRights. On a US-English system, it is called "Audit Access Rights" in the "Logon/Logoff" category. In the registry it has the same GUID as "Audit Token Right Adjusted" under "Detailed Tracking."
Microsoft updated the Windows Update packages on April 11 for some OSes, including Win11 23H2/24H2, Win11 LTSC 2024, WS2025, and Azure Stack HCI 22H2, so that applying WU after that date resolves the issue. (As far as I can tell, the mistake was never applied to Win10 22H2.) For many other supported OSes, including WS2022, WS2019, WS2016, Win10 LTSC 2019, Win10 LTSC 2016, fixing the issue requires finding, downloading, and installing an OS-specific out-of-band update from the Microsoft Update Catalog website. One of the outcomes of applying the fix is that the "Access Rights" subcategory and the AccessRights registry key is removed.