Hi Eric Stein1,
As you're encountering this issue across all your Server 2016 and 2019 machines, the root cause could be related to insufficient privileges or system-level settings.
Here's a troubleshooting process:
- Check User Rights Assignment:
Open Local Group Policy Editor (gpedit.msc) and navigate to:
Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment
Ensure that your user account or group is listed under the "Manage auditing and security log" policy. If not, add it.
- Ensure the object inherits the correct permissions, especially ensuring that "Include inheritable permissions from this object's parent" is enabled.
- User Account Control (UAC) might block certain administrative tasks. Temporarily lowering UAC settings (not recommended for security reasons) can help diagnose if this is the cause.
Reference:
Advanced security auditing FAQ - Windows 10 | Microsoft Learn
Local Accounts - Windows Security | Microsoft Learn
I hope the information above is helpful. If you have any question or concern, please feel free to let us know.
Best Regards,
Jacen Wang