Event ID: 619

Audit Security Object changed

Audit Security Object changed:
    Primary User Name:  %1
    Primary Domain: %2
    Primary Logon ID:   %3
    Client User Name:   %4
    Client Domain:  %5
    Client Logon ID:    %6
    Original Security Descriptor:   %7
    New Security Descriptor:    %8

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Policy Change"
How to enable Windows Auditing

Operating Systems:
Windows 2003 Windows XP

Audit Category:
Policy Change

LEFT/RIGHT arrow keys for navigation

Back to List