SEP 12.1.4013.4013.105
Server 2012/2012R2
Incessant Audit Failures rec'd on all my servers. It seems as if I get them mulitple times per minute...each and every minute...every day...after day...after day...
Does anyone have an update or a fix on this issue? The only thing I've found is the following KB:
www .symantec. com/business/support/index?page=content&id=TECH212361
The only suggestion is to turn off auditing. This is not an option for us and I need to know if there is a fix or will it be fixed in the next itteration of SEP?
| | | | | | | [ Name] | Microsoft-Windows-Security-Auditing |
| | | | [ Guid] | {54849625-5478-4994-A5BA-3E3B0328C30D} |
|
| | | | | Keywords | 0x8010000000000000 |
|
| | | | | | | [ SystemTime] | 2014-05-07T14:48:56.201410600Z |
|
| | | | | Computer | HYPR-01.domain.local |
|
| | | SubjectUserSid | S-1-5-21-656508280-552086760-267785383-500 |
| | | PrivilegeList | SeTcbPrivilege |
| | | ProcessName | C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe |