Event 10036 on Domain Controllers that have Active Directory WMI polling in InsightIDR

Hi All,

Thank you for your patience while the Engineering team worked on implementing this fix for the DCOM authentication errors.

This has now been deployed publicly to all Collectors and event sources that use the WMI method of collection.

If you have opted to use Agents to collect the Security logs from Domain Controllers and temporarily stopped Active Directory event sources you can now start the event sources and report back if you are continuing to see errors in Event Viewer.

3 Likes