Event ID 619
Audit Security Object changedAudit Security Object changed:
Primary User Name: %1
Primary Domain: %2
Primary Logon ID: %3
Client User Name: %4
Client Domain: %5
Client Logon ID: %6
Original Security Descriptor: %7
New Security Descriptor: %8Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Policy Change"
Audit Category:
Policy ChangeLEFT/RIGHT arrow keys for navigation
Back to List