Event ID 5144

A network share object was deleted

A network share object was deleted.

Subject:
    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:           %4

Share Information:  
    Share Name:         %5
    Share Path:         %6


Auditing:     Always


Volume:     Low


Microsoft Documentation

Event ID - 5144



NameFieldInsertion StringOSExample
Security IDSubjectUserSid%1Any DOMAIN\donson
Account NameSubjectUserName%2Any donson
Account DomainSubjectDomainName%3Any DOMAIN
Logon IDSubjectLogonId%4Any 0x38D19
Share NameShareName%5Any \\*\Pictures
Share PathShareLocalPath%6Any C:\Shares\Pictures


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"File Share"



LEFT/RIGHT arrow keys for navigation

Back to List