Netwrix Auditor System Health Log - Event ID 1003 / 1203

This article applies to Netwrix Auditor 6.0 and above. It explains the nature of the Event ID and provides resolution.
Email It to Me Print this Page
Symptoms Depending on your Netwrix Auditor version, the Netwrix Auditor System Health Log contains the following EventID
Netwrix Auditor 9.0 and above: 1203
Netwrix Auditor 8.5 and below: 1003

"The service <service name> has failed.
Cause An internal error occurred when trying to start the Netwrix Auditor for SharePoint service. There is no access to the configuration files, or some configuration files are missing.
Resolution Try re-creating your SharePoint monitoring plan (managed Object in Netwrix Auditor 8.5 and below). See for detailed instructions on how to create monitoring plans.
Was this information helpful?