10806EventSentryEventSentry determined that "Process Tracking" is currently enabled and was unable to deactivate it. A call to change the current audit policy failed with error %1. Please see the EventSentry documentation for troubleshooting advice on this problem.
This event is logged by EventSentry when Process Tracking has been disabled (and EventSentry configured to disable the audit features in the local policy) but the relevent audit policy could not be disabled.
Please review the error message for more information as to why the policy could not be changed.
This event will also be logged for the "Logon Tracking" feature.