Sophos Endpoint

Discussions Kernel-EventTracing error

Sophos Endpoint requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 15 subscribers
Views 2858 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Kernel-EventTracing error

Can carmack over 3 years ago

Hi all the community members,

Can't protect the Server 2012 R2 because of this logs in the event log.

This issue appearing for months still. Re-tried install / uninstalled repeteadly.
Support channels couldn't handle the issue except taking SDU

Please help anyone experienced this error as in the pictures.

This thread was automatically locked due to age.

Parents

0 Shweta over 3 years ago

Hi Can carmack

Could you please PM the case number that has already been registered? This will require in-depth investigation to check which process is causing this issue.

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Shweta over 3 years ago

Hi Can carmack

Could you please PM the case number that has already been registered? This will require in-depth investigation to check which process is causing this issue.

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Can carmack over 3 years ago in reply to Shweta

ok. thanks. Support given a kb for this issue. It is from MS KB;
APPLIED via cmd command according to kb but not fixed. Logs kept appearing

Kernel event ID 2 is logged when the MSFT_NetLbfoTeamNic class is called in Windows Server 2012 R2

However, if a WMI provider calls the MSFT_NetLbfoTeamNic class, the NETWORK SERVICE account does not have authority to write trace data to this file.
Cancel
Vote Up 0 Vote Down

Cancel
0 Can carmack over 3 years ago in reply to Shweta

pm sent
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User930 over 3 years ago in reply to Can carmack

SophosNTPService runs as local service rather than network service you mention.
Does this help: many Kernel-EventTracing 0xC0000022 errors caused by SophosNtpService.exe on Windows Servers - Discussions - Intercept X Endpoint - Sophos Community
Cancel
Vote Up 0 Vote Down

Cancel