Change Auditor preventing CrowdStrike Falcon updates (4380319)

Change Auditor preventing CrowdStrike Falcon updates

If the CSFalconService and NPSrvHost services are being audited, then perform the below mentioned steps.

1. Open the CA Client
2. Click on View> Administration
3. On the Administration Tasks, select Auditing menu in the left pane. After that select Services under Server
4. Select the template and click Edit
5. In the lower pane, under Service Auditing Wizard remove the CSFalconService and NPSrvHost
6. Once it is done, select the drop down on the Finish button and select Finish and Assign to Agent Configuration
7. Configuration Setup window opens and just click Ok
8. After that, select all the Agent and right click and select Refresh Configuration
9. Agent Configuration Success message appears near the system tray
10. Now, go to one of the Agent server
11. Restart the Change Auditor Agent Service or go to C:\Program Files\Quest\ChangeAuditor\Agent> search for Service Status Tray> Run as an administrator> go to system tray> select Agent icon> right click on it> select Refresh Configuration