10801
EventSentry
EventSentry was unable to query the local audit policy settings. A call to query the current audit policy failed with error %1. Please see the EventSentry documentation for troubleshooting advice on this problem.
This event is usually logged when the user account the EventSentry service (agent) is running under does not have sufficient permissions to query the local audit policy settings. Querying the audit policy is used for the "Process Tracking" features.
Make sure that the "EventSentry" service is configured to run under a user account that has local administrative permissions and/or permission to query the audit policy.
This event will also be logged for the "Logon Tracking" feature.