Event ID 564

Object Deleted 

Object Deleted:
    Object Server:   %1
    Handle ID:       %2
    Process ID:      %3
    Image File Name: %4

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Object Access"
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows Server 2000 Windows 2003 Windows XP

Audit Category:
Object Access
Corresponding Events:
4660

LEFT/RIGHT arrow keys for navigation

Back to List