I get errors when running a Domain Configuration Check. (NETIQKB49194)

fact
NetIQ Group Policy Guardian 2.0

symptom
I get errors when running a Domain Configuration Check.

symptom
Error: 'Unable to audit DC : DCName. Reason: Access is denied'

symptom
Error 'The following objects are NOT properly configured for auditing on domain controller, DCName!'

symptom
Domain Configuration Check fails.

cause
The service account is not a Domain Admin.

cause
The service account does not have the SeSecurityPrivilege (Manage auditing and security log) privilege.

cause
The service account cannot access the security event log.

fix
Make the service account a Domain Admin and select the Enable all privileges check box.

Formerly known as NETIQKB49194