In Change Auditor Client, can search for folder permission or folder ownership events, but the event properties do not have the "From" and "To" values.
The following errors and warnings are repeated numerous times in the Change Auditor Agent log:
[ERROR][Emc::EmcSink::WorkerMain(287)] Error processing EMC event (Emc::FileX::GetFileSecurityX - Unable to retrieve security descriptor from path: \\CIFS server on physical Data Mover\CHECK$\root_vdm_2\CIFS server on Virtual Data Mover\... Error: The filename, directory name, or volume label syntax is incorrect.).
[WARN][Emc::EmcSink::ProcessObjectPermissionChange(579)] ERROR_ACCESS_DENIED getting security descriptor for \\CIFS server on physical Data Mover\CHECK$\root_vdm_2\CIFS server on virtual data mover\....