Event ID 619
Audit Security Object changedAudit Security Object changed: Primary User Name: %1 Primary Domain: %2 Primary Logon ID: %3 Client User Name: %4 Client Domain: %5 Client Logon ID: %6 Original Security Descriptor: %7 New Security Descriptor: %8
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Policy Change"
Audit Category:
Policy ChangeLEFT/RIGHT arrow keys for navigation
Back to List