Recently, I started to experience this issue on a vast amount of servers in our domain environment. We have set Audit Policies so that user or system activity in specified event categories is recorded. This is how our audit policy looks like: We have created a plan before we implemented audit policy, and ran the Read More →