Error event ID 5605 is recorded in the application log when audit data is collected on the target servers without agents installed.
This problem occurs because audit data is collected without agents.
The event occurs as:
- an error for the servers with Windows Vista/ Windows Server 2008 installed;
- a warning for the servers with Windows Server 2008 R2/ Windows 7 installed.
For instructions on how to resolve the issue, refer to the following Microsoft Knowledge Base article: Warning Event ID 5605 is Logged in Application Log when querying MSCluster namespace via WMI.