High Operating Systems ✓ Solution Verified by Community (0+ upvotes)

How to fix error error-access-audit-by-policy in Windows 11

ERROR_ACCESS_AUDIT_BY_POLICY = 785

65% success rate
👥 0+ users verified
📅 Updated: 2026-08-12
⏱️ 15 min read
Fix based on community reports and expert analysis. Last verified: 2026-08-12 · How we verify fixes
Error Codeerror-access-audit-by-policy
Affected SystemWindows 11 (Microsoft)
DifficultyHigh
Estimated Time15 min
Requires Admin Rights⚠️ Yes

Solution Steps

  1. 1 Press Windows key + R, type 'eventvwr.msc', and press Enter. In Event Viewer, go to Windows Logs > Security. Look for event ID 4663 or 4656 with this error code. This will show you which file or resource was accessed and by whom. This helps you understand if it's a legitimate access or a potential security issue.
  2. 2 If you want to stop these audit events, you can modify the audit policy. Press Win+R, type 'secpol.msc', and press Enter. Go to Security Settings > Local Policies > Audit Policy. Double-click 'Audit object access' and select 'No auditing'. This stops logging of object access attempts.
  3. 3 If you are in a corporate environment, contact your IT administrator. They may have set up these policies intentionally for security monitoring. Do not change them without permission.
  4. 4 If the error appears in a specific application, check if the application has its own audit settings. Look in the application's settings for 'audit' or 'logging' options and disable them if you don't need them.
  5. 5 If you suspect a security issue, run a full antivirus scan using Windows Security (Settings > Privacy & Security > Windows Security > Virus & threat protection > Scan options > Full scan).

🔍 Didn't work? Enter your GPU and CPU for hardware-specific advice:

🔧 Still having issues?

Describe your exact problem to Error Buddy and get a personalized fix in seconds.

🛠️ Try Error Buddy — It's Free