STAS workstation polling via WMI error RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

Hello, I have configured Sophos STAS on a new Active Directory domain. Everything works except the workstation polling via WMI.

In the test utility I get an "access denied".

in the event viewer of the workstation i have this error:

Event 10036
The server-side authentication level policy does not allow the user *** SID (***) from address *** to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application.

Using wbemtest with the STAS service user the connection is okIt looks like it depends on this update by Microsoft, using the registry key does not have any effect, maybe there is need for an update of Sophos STAS client.

Added TAGs
[edited by: Erick Jan at 2:09 PM (GMT -8) on 29 Feb 2024]