Hello,
I am using Server 2008 R2 to manage AppLocker policies for machines across my network. The AppLocker policies themselves are working fine, but I am getting an error in the AppLocker logs of the AD server: it is event ID 800 and the message is: "Application Identity Policy conversion failed. Status Log space is exhausted".
I have the AppLocker log set to 2 MB instead of its default 1 MB, and it is set to roll over (overwrite new events). I also have a subscription set up to forward AppLocker events to the Application Log so that our system SIEM can pull the logs. The Application Log is also set to roll over. I have tried clearing out both logs and restarting the server, but the error message still appears.
What could be causing this?
Thanks!