![]() ![]() Object Name: The name of the registry key being accessed.This is the registry key and value upon whom the action was attempted. ![]() Logon ID allows you to correlate backwards to the logon event (4624) as well as with other events logged during the same logon session. Logon ID is a semi-unique (unique between reboots) number that identifies the logon session.Account Domain: The domain or - in the case of local accounts - computer name.The user and logon session that performed the action. Free Active Directory Change Auditing Solution.Windows Event Collection: Supercharger Free Edtion.Free Security Log Quick Reference Chart.Of course this event will only be logged if the key's audit policy is enabled for Set Value permission for the appropriate user or a group in the user is a member. See Operation Type to find out if the value was created, modified or deleted. This event is logged between the open ( 4656) and close ( 4658) events for the registry KEY where the value resides. This event documents creation, modification and deletion of registry VALUES. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |