Event ID 5889

An object was deleted from the COM+ Catalog. 

An object was deleted from the COM+ Catalog.

Subject:
    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:       %4

Object:
    COM+ Catalog Collection:    %5
    Object Name:            %6
    Object Details:         %7
This event occurs when an object is deleted from the COM+ catalog.


This event generates when the object in the COM+ Catalog was deleted.

Note: This event is logged with the System Integrity (task) category.

Microsoft Documentation

Event ID - 5889


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Other Object Access Events"
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows Vista Windows 2008 Windows 2008 R2 Windows 7 Windows 2012 Windows 2012 R2 Windows 8 Windows 8.1 Windows 10 Windows 2016 Windows 2019 Windows 11 Windows 2022

Tags:
Audit Success
Audit Category:
Object Access

Audit Subcategory:
Other Object Access Events

LEFT/RIGHT arrow keys for navigation

Back to List