Event ID: 564

Object Deleted

Object Deleted:
    Object Server:   %1
    Handle ID:       %2
    Process ID:      %3
    Image File Name: %4


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Object Access"
How to enable Windows Auditing


Audit Category:
Object Access
Corresponding Events:
4660


LEFT/RIGHT arrow keys for navigation

Back to List