Event ID: 809A security event source has attempted to unregister
A security event source has attempted to unregister. Primary User Name: %1 Primary Domain: %2 Primary Logon ID: %3 Client User Name: %4 Client Domain: %5 Client Logon ID: %6 Source Name: %7 Process Id: %8 Event Source Id: %9 Image File Name: %10
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Policy Change"
LEFT/RIGHT arrow keys for navigationBack to List