Thursday, August 11, 2011

EventID 26338 on RMS: ‘The System Center Data Access service is unable to generate security audit events’

Issue and cause
When the RMS shows the Alert ‘The System Center Data Access service is unable to generate security audit events’, it typically means there are some (or more) GPO’s in place which cause this issue.
image

How to solve it
The Alert tells you exactly how to solve it:
image

All you have to do it to create a delta GPO which allows the SDK account on the RMS to generate security audit events. Apply the GPO by running gpupdate /force from an elevated cmd-prompt and run the command rsop.msc right after it. That way you’ll see whether the delta GPO has landed properly:
image

Check and double check
Since the Alert is generated by a Rule, close the Alert manually. Restart the SDK service in order to see all is well. The Alert shouldn’t return now. Since the

No comments: