Event 4756 & report "Security Sensitive Groups Changes". (Network Steve Forum)

Event 4756 & report "Security Sensitive Groups Changes".

Hello. When you use the ACS (SCOM2012 sp1) encounter this problem: In the report, "Security Sensitive Groups Changes" no information on changes to the universal group. If a local group or a global - change data is available in full. I found the info about the event with number 4756 not correctly written to the ACS database (table AdtServer.dvAll5). Fields PrimaryUser, ClientUser, ClientSid, ClientDomain not have value. Can someone help fix ACS to write events to database and receive adequate 4756 in the report "Sensitive Security Groups Changes"?

June 18th, 2013 1:30pm

Hi,

Please check the error referring to the following post:

Error in SCOM 2012 ACS Report: Sensitive Security Groups Changes

http://scomandplus.blogspot.com/2012/08/error-in-scom-2012-acs-report-sensitive.html

Thanks.

Free Windows Admin Tool Kit Click here and download it now

June 20th, 2013 8:06am

Hello,

we have the same problem in a new SCCOM 2012R2 (with ACS) installation. In the report "Sensitive Security Groups Changes" the data to the Event 4756 and 4757 are incorrect. I can also see that the data for the event 4756 and 4757 are not entered correctly into the ACS database.

I have changed the file eventschema.xml as described in the article. However, this does not resolve the issue.

What could be more the cause?

Many greetings... Uwe

September 4th, 2015 2:59am

This topic is archived. No further replies will be accepted.