cancel
Showing results for 
Search instead for 
Did you mean: 

FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

We have observed an issue where FIMCLI.EXE causes login permission errors in the Windows Security Log.  This happens so rapidly that it fills up the OS volume.

Is this a known issue with a quick fix?  Could not find anything by searching.

Policy Auditor 6.0.1.183

ePolicy Orchestrator 4.6.7.278

Windows Server OSes

3 Replies

Re: FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

Windows Event ID 4688

Also happens on Windows 7, not just server OS

Message was edited by: jpeg9999 on 4/1/14 8:09:41 AM CDT

Re: FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

Was a fix ever found?

rt80
Level 7
Report Inappropriate Content
Message 4 of 4

Re: FIMCLI.EXE causes Windows Security Log to fill up rapidly on servers

I'm getting the Windows Event Code 4625 "An account failed to log on" on Windows server and Windows 10 systems with Policy Auditor agent installed.   It is associated with the fimcli.exe.  The error code doesn't happen to systems which don't have the Policy Auditor agent installed.

Here are the system versions:

  1. ePO 5.3.1
  2. Policy Auditor 6.3.0
  3. Policy Auditor Agent 6.3.0
  4. McAfee Agent 5.5.0

Any thoughts on what I can do to resolve this error? 

Member Rewards
McAfee Community rewards active and helpful members just like you. Click here to take a look at the first community members who received a special reward and were recognized by McAfee leader, Aneel Jaeel, for their participation and trusted knowledge in the community.