Event ID 809
A security event source has attempted to unregisterA security event source has attempted to unregister.
Primary User Name: %1
Primary Domain: %2
Primary Logon ID: %3
Client User Name: %4
Client Domain: %5
Client Logon ID: %6
Source Name: %7
Process Id: %8
Event Source Id: %9
Image File Name: %10Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Policy Change"
LEFT/RIGHT arrow keys for navigation
Back to List