Windows 11 Event id 5038 and Crowdstrike

  • Thread starter Thread starter Jeff102365
  • Start date Start date
J

Jeff102365

We have dozens of windows 11 pro workstations where the security event log records thousands of entries per day with event id 5038. We have Crowdstrike Falcon sensors on all of our workstations. Crowdstrike keeps blaming Microsoft and tells us to submit a case with MS. Looking up the error, techs say you can safely ignore this error, but the problem is that it fills the user's security log after 5 or 6 days and it will not allow a user to log in until the log file is cleared. We do not allow users to be administrators of their machine, so an admin has to log in and clear the log, this we canno

Continue reading...
 
Back
Top