Unlike Computer Collections (gathering tasks), import and consolidation tasks are always saved and then run as Windows Scheduled Tasks. That is, an import or consolidation task is stored and started as a scheduled task even if you don't specify any schedule for it and always start it manually from the InTrust for Events user interface.
In the properties of the scheduled task that InTrust for Events creates for each of its import and consolidation tasks, long names of files and folders in the command line to run (Run data field) are specified in the DOS-compatible short (8.3) form with tildes and numbers (such as ~1). For example, the name of the "Program Files" folder is reduced to "PROGRA~1".
On some systems, administrators disable the support for 8.3 names of files and folders to increase NTFS performance or for some other reasons (for details see the Microsoft KB Article ID 210638: http://support.microsoft.com/?scid=210638.
When this feature is turned off in Windows, the system does not recognize names of files and folders like "PROGRA~1" or "INTRUS~1" as, respectively, "Program Files" and "InTrust for Events". Therefore, any command line that contains names of files and folders in 8.3 format fails. This includes all scheduled tasks that InTrust for Events has created in Windows for its import and consolidation tasks.
Enable support for short (DOS-compatible 8.3) file names in the operating system on the InTrust for Events machine.
To do so, use REGEDIT.EXE, REGEDT32. EXE, or a similar tool to change the following value in the Windows registry:
Key name: HKEY_LOCAL_ MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
Value name: NtfsDisable8dot3NameCreation
Value to set: 0
The change will take affect after you restart the computer.
NOTE: It is advisable to backup the Windows Registry before making any changes to it.