"

Netwrix Auditor System Health Log – Event ID 1041

Last review: May 05, 2014
https://kb.netwrix.com/1108
Copy Article URL Copied

Netwrix Auditor System Health Log contains the following Event ID: 1041

Audit settings for security events in site collection <ID> are not configured properly. As a result, some security events may be lost“.


The Editing users and permissions audit is disabled on the site collection.

Open Netwrix Auditor Administrator Console, navigate to Managed Objects –> your_SharePoint_Managed_Object  –> SharePoint and click Configure Options. In the Options dialog, select Adjust audit settings automatically.

On your site collection that must be included in the audited scope, navigate to Site settings –> Site collection audit settings–>  Specify the events to audit and select Editing users and permissions.

Go Up