Event ID: 612

Audit Policy Change

Audit Policy Change:
 New Policy:
    Success Failure
        %3      %4  Logon/Logoff
        %5      %6  Object Access
        %7      %8  Privilege Use
        %13     %14 Account Management
        %11     %12 Policy Change
        %1      %2  System
        %9      %10 Detailed Tracking
        %15     %16 Directory Service Access
        %17     %18 Account Logon

 Changed By:
      User Name:    %19
      Domain Name:  %20
      Logon ID: %21


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Policy Change"
How to enable Windows Auditing


Operating Systems:
Windows 2003 Windows XP

Audit Category:
Policy Change
Corresponding Events:
4719


LEFT/RIGHT arrow keys for navigation

Back to List