This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 36%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER1%3C/text%3E%3C/svg%3E)
Hi,
I have tried to resolve this MDI Health Issue "Auditing on the Configuration container is not enabled as required" for over a week now, but sadly without sucess.
I have followed the instructions posted here https://aka.ms/mdi/ExchangeAuditing, but still the issue is displayed. I have to say I have found the instructions quite useful on other Health issues, but this one proved to be tricky.
I tried to search the net for this issue, but did not come up with anything usefull.
Can you please advise on how to possibly resolve this issue?
Best regards,
Robert
Does really nobody have an idea why I am not able to fix this issue despite following the instructions?
Can I help with more info?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Hello @RobertGrafKlosterer-1076,
Is this your Domain controller? If so, you need to set this policy at GPO Level. Kindly see the link below for guidance.
https://learn.microsoft.com/en-us/answers/questions/1663498/defender-for-identity-how-to-resolve-health-issue
Hi,
Is this a Domain controller? If yes, the policy should be set at the GPO Level
See guidance on this doc https://learn.microsoft.com/en-us/defender-for-identity/health-alerts#auditing-on-the-configuration-container-is-not-enabled-as-required
Now I feel stupid, really stupid.
I have checked the settings again and recognized I did the auditing entry in the wrong naming context, namely the "Default naming context" instead of "Configuration".
I rolled back the changes and created the correct entry. I will check back tomorrow to see if this remedied the error.
Thanks for your help, I am really sorry to have bothered you.
As expected, the health issue is now resolved. Thank you again for pointing out my error. The auditing entry needs to be in the naming context "Configuration".