Failed to open the event log. Error details: A required privilege is not held by the client.

Active Directory
6.5 and older
7.0-8.5
https://kb.netwrix.com/1156
Copy Article URL Copied

Netwrix Auditor is installed in a child domain and the report contains the following error for the root domain controllers:
“Failed to process DC: Domain controller name. The error is: Failed to open the event log. Error details: A required privilege is not held by the client”


This error indicates that auditing is not configured properly (or not configured at all) in the root domain.


To resolve this issue, perform the following steps:

  1. Run the Audit Configuration wizard using one the following way:
    • Open Netwrix Auditor console, select a target system and click Configure Audit in the pane at the right.
  2. Check the “Also configure forest root domain” checkbox. Click Next to proceed with the wizard. Audit Configuration wizard will configure the root domain auditing.
Note: You have to run Audit Configuration wizard under Enterprise administrator account.
Go Up