Event ID: 6422

A device was enabled.

A device was enabled.

    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:       %4

Device ID:  %5

Device Name:    %6

Class ID:       %7

Class Name: %8

Hardware IDs:   %9

Compatible IDs: %10

Location Information:   %11

Recommended Auditing
Always enable auditing of this sub category.


Microsoft Documentation

Event ID - 6422

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Detailed Tracking"

LEFT/RIGHT arrow keys for navigation

Back to List