Error: Auditing of Directory Service Access is not enabled for this DC.

Active Directory
6.5 and older
7.0-8.5
https://kb.netwrix.com/1138
Copy Article URL Copied

The product report contains error: ‘DC collection warnings: Domain Controller. The message is: [ERROR] Auditing of Directory Service Access is not enabled for this DC.


The error indicates that auditing of Directory Service Access is not enabled for the specified domain controller.


To troubleshot this issue, log on to the Domain controller indicated in the error message and perform the following steps:

  1. Select Start -> Run and type rsop.msc.
  2. Navigate to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Audit policy.
  3. Make sure Audit directory service access policy is set to Success.

If these the policy is set to Success and still there are errors (red icon), perform the following steps:

  1. Select Start -> Run and type secpol.msc.
  2. Navigate to Local Policies -> Audit policy.
  3. Make sure Audit directory service access policy is set to Success (GPO may be successfully distributed but not applied to the Domain Controller).
Go Up