Hello,

I created a new rule in the Event log Rules

Then only info I filled was:

Name: Schannel

ID: 36888

Source: Schannel

Severity: Or, ignore the event.

I don't know why but it doesn't seem to work. That particular event falls under the Any System Failure rule where the Event type is Critical + Error and severity is Critical.

What am I doing wrong ?

Thanks.

Marco C.