Incorrect "failed folder access" event generated when access is denied to a file and it is opened (4219726)

Incorrect "failed folder access" event generated when access is denied to a file and it is opened

1. Access to file <file_name> was denied on <file_server> by NTFS permissions. (Denied access: read, write).
2. Access to folder <file_name>\ was denied on <file_server> by NTFS permissions. (Denied access: read, write).

It is expected that only the "Access to file" event should be recorded.

WORKAROUND

None

STATUS

Waiting for fix in a future release of Change Auditor.

7004

The following behavior was noted in different operating systems: Windows 2008R2 - One failed file open and one failed folder open are reported on Change Auditor 6.8 when opened locally Windows 2008R2 - One failed file open and one failed folder open are reported on Change Auditor 6.8 when opened remotely Windows 2012R2 - Two failed file open and one failed folder open are reported on Change Auditor 6.8 when opened locally Windows 2012R2 - One failed file open and one failed folder open are reported on Change Auditor 6.8 when opened remotely