Event ID 5449

A Windows Filtering Platform provider context has been changed.

A Windows Filtering Platform provider context has been changed.

Subject:
    Security ID:        %2
    Account Name:       %3

Process Information:
    Process ID: %1

Provider Information:
    Provider ID:    %4
    Provider Name:  %5

Change Information:
    Change Type:    %6

Provider Context:
    ID: %7
    Name:   %8
    Type:   %9




Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Filtering Platform Policy Change"



LEFT/RIGHT arrow keys for navigation

Back to List