Event id 5038 and Crowdstrike

[Guest Jeff102365]

We have dozens of windows 11 pro workstations where the security event log records thousands of entries per day with event id 5038. We have Crowdstrike Falcon sensors on all of our workstations. Crowdstrike keeps blaming Microsoft and tells us to submit a case with MS. Looking up the error, techs say you can safely ignore this error, but the problem is that it fills the user's security log after 5 or 6 days and it will not allow a user to log in until the log file is cleared. We do not allow users to be administrators of their machine, so an admin has to log in and clear the log, this we canno

 

Continue reading...