Event ID: 4693

Recovery of data protection master key was attempted

Recovery of data protection master key was attempted.

Subject:
    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:           %4

Key Information:
    Key Identifier:     %5
    Recovery Server:    %6
    Recovery Key ID:    %8
    Recovery Reason:    %7

Status Information:
    Status Code:        %9


Auditing:     Always

Generally only necessary for troubleshooting purposes, but due the low volume is nevertheless recommended.


Volume:     Low


Microsoft Documentation

Event ID - 4693



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"DPAPI Activity"



LEFT/RIGHT arrow keys for navigation

Back to List