Event ID 5889

An object was deleted from the COM+ Catalog.

An object was deleted from the COM+ Catalog.

Subject:
    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:       %4

Object:
    COM+ Catalog Collection:    %5
    Object Name:            %6
    Object Details:         %7
This event occurs when an object is deleted from the COM+ catalog.

This event generates when the object in the COM+ Catalog was deleted.

Note: This event is logged with the System Integrity (task) category.

Microsoft Documentation

Event ID - 5889

Lookup Audit Policy Configuration Settings


  C:\> AuditPol.exe /get  /subcategory:"Other Object Access Events"

How to enable Windows Auditing

Recommended Audit Policy

Operating Systems:

Windows Vista Windows 2008 Windows 2008 R2 Windows 7 Windows 2012 Windows 2012 R2 Windows 8 Windows 8.1 Windows 10 Windows 2016 Windows 2019 Windows 11 Windows 2022

Tags:

Audit Success

Audit Category:

Object Access

Audit Subcategory:

Other Object Access Events

LEFT/RIGHT arrow keys for navigation

Back to List