Event ID 4671
An application attempted to access a blocked ordinal through the TBSCurrently this event doesn’t generate. It is a defined event, but it is never invoked by the operating system.
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Other Object Access Events"
LEFT/RIGHT arrow keys for navigation
Back to List