Policy Analyzer not working

[bennn2806]

Hello! My Policy Analyzer is not working correctly. 

I am currently running the latest Policy Analyzer version (v3.2.1803.28001) on Windows 10, Version 1909.

It says "Error message: An error occured while parsing EntityName. Line 152, position 82."

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/microsoft-policy-analyzer-not-wo...

When it is generating the report the error comes on, It does create a report, but i am unable to open it.

Is there any way to fix this?

Thank you!

Dear regards,

Bennn2806

[#2]

@bennn2806 I have the exactly the same problem, might be a non US language problem ? I also run PA 4.0 on DE systems.

The reported line differs between client and server and I am missing the effective state of all audit policys if I ignore the error message.

[#3]

@FLeven and @bennn2806 : at what point does this happen? What are you doing when the error message appears?  

[#4]

Compare to effektiv state, after the Username / Password I get the error.

[#5]

@FLeven - I'm trying to repro but haven't been able to. I don't see "EntityName" anywhere, so I think it's something specific to your report. Can you send me a private message through here with the .PolicyRules report attached?

[#6]

@AaronMargosis_individ 

It is a a problem with the GPOs on the local system, I managed to run "Compare to effective state" on a non domain joined machine, but it will not work on a domain joined machine in the "Computers" OU, where the Default Domain Policy is applied.

Also it will work if I choose a simple GPO without Sec or Autit policys.

I am using the "MSFT-Win10-WS-v1809-FINAL.PolicyRules" shipped with PA 4.

As you can see the effictive state of the Audit Policy entry's are empty, because it failed to compare them for whatever reason.

I did some cleanup of my local auditpols etc. but no dice.

[#7]

@FLeven Look in your user account's %TEMP% directory and see whether it leaves behind any temporary files. If so, what's in them?

[#8]

Empty, already checked the folder and tried to Grab the tmp File that will be created by PA when IT Starts to build the Policy File, but it IS only available for a second and I was not able to get a Copy of it.

[#9]

@FLeven 

I checked the 4 tmp files, but there is nothing special to find in them and I am not able to relate to the line mentioned in the error.

The files contain autditpol / secedit reports, a file with the two lines starting the reports and another file with some settings.  

German special characters are not displayed well.

[#10]

@FLeven Can you post those tmp files here, or send to me in a private message through this site?

[#11]

@AaronMargosis_individ 

[#12]

@FLeven Hmm, odd. The XML file in that set isn't complete, and none of the files have as many lines as the error message indicates it should have: the error message says the error happens on a line that's not in any of those files.

[#13]

myself earlier: "I am not able to relate to the line mentioned in the error"