We are noticing in the audit probe there are entries for ntservices that do not have an associated user. What does this mean?
Release : 20.3+
Component: audit probe
This would represent something has changed the .cfg file outside of IM, AC, direct user scenario. This example makes most sense as a new service (new application) being installed on the system and ntservice probe is set to 'Automatically add new services' on the Properties tab of the probes configuration.