Error: "Access Denied" during examination session

Account lockout examination fails with multiple "access denied" errors. Cannot examine a workstation, a lot of examination errors
Email It to Me Print this Page
Symptoms Account lockout examination fails with multiple "access denied" errors. 

User-added image
Cause "Access denied" errors indicate that the product has insufficient rights to collect lockout events on monitored computers. Since Account Lockout Examiner works as a service, the issue is that the account specified to run the service has insufficient permissions.
Resolution To resolve the issue grant the Account Lockout Examiner service account the local administrator rights.
On the machine that is to be examined:
  1. Run Computer management
  2. Expand System tools - Local users and groups - Groups
  3. Right click Administrators group and select Add to group
  4. Clcik Add and specify the service account. Click Ok

User-added image

Was this information helpful?