Event ID 612

Audit Policy Change:
 New Policy:
    Success Failure
        %3      %4  Logon/Logoff
        %5      %6  Object Access
        %7      %8  Privilege Use
        %13     %14 Account Management
        %11     %12 Policy Change
        %1      %2  System
        %9      %10 Detailed Tracking
        %15     %16 Directory Service Access
        %17     %18 Account Logon

 Changed By:
      User Name:    %19
      Domain Name:  %20
      Logon ID: %21