000019356 - Windows - Not Receiving Application and System Events

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000019356
Applies ToenVision
Microsoft Windows
Security
Application
System
Events
Configure
Issue Security Events are being received, but Application & System Events are not.
Resolution

To receive application and system events:

enVision Configuration:

  1. In enVision, go to Overview> System Configuration >Services >Device Services > Windows Service > Manage Windows Service.

  2. Verify that the server in question is not configured to only collect Security Events.

Windows Configuration:
The enVision account needs to be removed from the remote system.

  1. Right-click on My Computer and select Manage.

  2. If the target computer is a remote computer, right-click Computer Management (Local), and then click Connect to another computer.

  3. Under Local Users and Groups, click Groups.

  4. In the details pane, double-click Guests.

  5. Select the account, and click Remove.

  6. Click OK.

Note: You may need to log off and log back on for the changes to take affect.

Legacy Article IDa36762

Attachments

    Outcomes