Event ID 5461
PAStore Engine failed to apply local registry storage IPsec policy on the computerPAStore Engine failed to apply local registry storage IPsec policy on the computer. Policy: %1 Error Code: %2
Event 5461 indicates that the Policy Agent (PAStore) was unable to apply the IPsec security settings stored in the local registry. This usually happens because of a permissions conflict, a corrupted registry key, or a Group Policy (GPO) collision.
Auditing:
Conditional
Enable only when monitoring IPsec policy application health across managed machines.
Volume:
Low
On any healthy machine this event should never appear. When it does, it is almost always in a cluster alongside 5457 and 5459 on domain machines, or immediately after a single 5460 failure on standalone machines.
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Filtering Platform Policy Change"
LEFT/RIGHT arrow keys for navigation
Back to List