Sophos Endpoint

Discussions Kernel-EventTracing error

Sophos Endpoint requires membership for participation - click to join

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Kernel-EventTracing error

Can carmack over 4 years ago

Hi all the community members,

Can't protect the Server 2012 R2 because of this logs in the event log.

This issue appearing for months still. Re-tried install / uninstalled repeteadly.
Support channels couldn't handle the issue except taking SDU

Please help anyone experienced this error as in the pictures.

This thread was automatically locked due to age.

0 Shweta over 4 years ago

Hi Can carmack

Could you please PM the case number that has already been registered? This will require in-depth investigation to check which process is causing this issue.

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
- 0 Can carmack over 4 years ago in reply to Shweta
  
  ok. thanks. Support given a kb for this issue. It is from MS KB;
  APPLIED via cmd command according to kb but not fixed. Logs kept appearing
  
  Kernel event ID 2 is logged when the MSFT_NetLbfoTeamNic class is called in Windows Server 2012 R2
  
  However, if a WMI provider calls the MSFT_NetLbfoTeamNic class, the NETWORK SERVICE account does not have authority to write trace data to this file.
  - 0 Sophos User930 over 4 years ago in reply to Can carmack
    
    SophosNTPService runs as local service rather than network service you mention.
    Does this help: many Kernel-EventTracing 0xC0000022 errors caused by SophosNtpService.exe on Windows Servers - Discussions - Intercept X Endpoint - Sophos Community
- 0 Can carmack over 4 years ago in reply to Shweta
  
  pm sent