Change Auditor agent fail to start with error " Failed to generate key pair: 0x80070005" (4233527)

The Change Auditor agent fail to start and the following error appear in the agent log file:

1. Run Process Monitor (ProcMon), make sure Capture is enabled.
   • 
2. Start the Change Auditor agent.
3. Wait until the error Failed to generate key pair: 0x8007000 appear in the Change Auditor agent log. 
4. Stop capture in ProcMon.
5. Save the ProcMon log, please select All Events in the Save dialog.
   • 

Note: Process Monitor can be downloaded from Microsoft Website

Check the logs for an error like the following:

4:22:32.0520650 AM NPSrvHost.exe C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\aaaaaa3f91fe06692173a83fb49d0ef2d_54a000c5-7a26-49df-8e85-3d1539beb9a2 ACCESS DENIED

If found, please follow the instruction below to grant permission to the ProgramData\Microsoft\Crypto\RSA\MachineKeys

1. On the server with the failing agent, navigate to C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
2. Right-click on the folder and select Properties
3. Select the Security tab
4. Add or Modify SYSTEM, and give it Full Control
5. Restart the Change Auditor Agent