W615: AN Group 'XXXX' is currently locked by user "YYYY" on host "ZZZZ".

Document ID : KB000054744
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

When working with Audit Nodes and Audit Node Groups on the Win32 Audit Policy Manager, on rare occasion, a W615 warning message may appear.

Figure 1

This error above generally appears after the Policy Manager was stopped abruptly. For example, ending the policy manager task forcefully through Windows Task Manager may cause a lock on an object.

This document explains how to unlock an object.

Solution:

  1. Click the OK button, on the W615 popup message box.

  2. In the Audit Policy Manager GUI, select the Tools Menu and then select Unlock Objects.

  3. Select the locked object and then click on the Delete button.

The above steps resolve the aforementioned error.