Event ID: 4691

Indirect access to an object was requested

Indirect access to an object was requested.

    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:           %4

    Object Type:        %5
    Object Name:        %6

Process Information:
    Process ID:         %9

Access Request Information:
    Accesses:           %7
    Access Mask:        %8
Microsoft Documentation

Event ID - 4691

Indicates that indirect access to an object was requested, generated for ALPC Ports access request actions.

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Other Object Access Events"
How to enable Windows Auditing

LEFT/RIGHT arrow keys for navigation

Back to List