Agents on W2K22 are not able to receive Kerberos authentication events (NTLM and object changes are working).
Agent log shows the following event: "Unable to load Kerberos auditing components. Kerberos Authentication events will not be available."
This was fixed on latest 7.5 CA version
Defect ID 515490 is already fixed.
There appears to be a broken hook on 2019 DC agents after the Windows update on September 10th, 2024 that affects the "User authenticated through Kerberos” and "User failed to authenticate through Kerberos" events.
Defect ID 520745 is already fixed.
There appears to be a broken hook on 2022 and 2019 DC agents after the Windows update on October 8th, 2024 that affects the "User authenticated through Kerberos” and "User failed to authenticate through Kerberos" events.