Event ID: 4909

The local policy settings for the TBS were changed

The local policy settings for the TBS were changed.

Old Blocked Ordinals:   %1
New Blocked Ordinals:   %2
Microsoft Documentation

Event ID - 4909



Currently this event doesn’t generate. It is a defined event, but it is never invoked by the operating system.



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Other Policy Change Events"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List