Hi,
For event id 4511, it is complicated (varies from environment to environment) and may require digging into the management pack. You may locate the management pack unsealed version according to the rule name and check to see if there are any findings.
Below is a similar blog to locate the root cause and solution for your reference.
Regards,
Alex