cancel
Showing results for 
Search instead for 
Did you mean: 
jpeg9999
Not applicable
Report Inappropriate Content
Message 1 of 4

FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

We have observed an issue where FIMCLI.EXE causes login permission errors in the Windows Security Log.  This happens so rapidly that it fills up the OS volume.

Is this a known issue with a quick fix?  Could not find anything by searching.

Policy Auditor 6.0.1.183

ePolicy Orchestrator 4.6.7.278

Windows Server OSes

3 Replies
jpeg9999
Not applicable
Report Inappropriate Content
Message 2 of 4

Re: FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

Windows Event ID 4688

Also happens on Windows 7, not just server OS

Message was edited by: jpeg9999 on 4/1/14 8:09:41 AM CDT
mmarti30
Not applicable
Report Inappropriate Content
Message 3 of 4

Re: FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

Was a fix ever found?

rt80
Not applicable
Report Inappropriate Content
Message 4 of 4

Re: FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

I'm getting the Windows Event Code 4625 "An account failed to log on" on Windows server and Windows 10 systems with Policy Auditor agent installed.   It is associated with the fimcli.exe.  The error code doesn't happen to systems which don't have the Policy Auditor agent installed.

Here are the system versions:

  1. ePO 5.3.1
  2. Policy Auditor 6.3.0
  3. Policy Auditor Agent 6.3.0
  4. McAfee Agent 5.5.0

Any thoughts on what I can do to resolve this error? 

McAfee ePO Support Center Plug-in
Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.