Audit probe shows an audit record for new entries in the ntservice config but no user

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

We are noticing in the audit probe there are entries for ntservices that do not have an associated user. What does this mean?

Environment

Release : 20.3+
Component: audit probe

Resolution

This would represent something has changed the .cfg file outside of IM, AC, direct user scenario. This example makes most sense as a new service (new application) being installed on the system and ntservice probe is set to 'Automatically add new services' on the Properties tab of the probes configuration.