Return
-
Title
For Agent disconnect event the WHO is blank -
Description
When an Agent service is stopped , either gracefully or forcibly stopped, for the event class Change Auditor Agent disconnected the WHO is blank.
-
Cause
Since Windows Server 2008, Microsoft no longer records the initiator for the EventID 7036, The Dell Change Auditor Agent service entered the stopped state. -
Resolution
WORKAROUND
None as this is expected behaviour
STATUS
Enhancement request number TF00484709 has been submitted to Development for consideration in a future release of Change Auditor
-
Defect ID
TF00484709