Account lockout examination fails with multiple “access denied” errors.
“Access denied” errors indicate that the product has insufficient rights to collect lockout events on monitored computers. Since Account Lockout Examiner works as a service, the issue is that the account specified to run the service has insufficient permissions.
To resolve the issue grant the Account Lockout Examiner service account the local administrator rights.
On the machine that is to be examined:
- Run Computer management
- Expand System tools – Local users and groups – Groups
- Right click Administrators group and select Add to group
- Clcik Add and specify the service account. Click Ok