Event ID: 4985The state of a transaction has changed
The state of a transaction has changed. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: %4 Transaction Information: RM Transaction ID: %5 New State: %6 Resource Manager: %7 Process Information: Process ID: %8 Process Name: %9
This is an informational event from file system Transaction Manager.
Little security relevance, mostly used for troubleshooting.
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"File System"
LEFT/RIGHT arrow keys for navigationBack to List