立即与支持人员聊天
与支持团队交流

Change Auditor for Active Directory 7.2 - Event Reference Guide

Group Policy Item

Access Credential Manager as a Trusted Caller

Created when the Access Credential Manager as a Trusted Caller policy is changed in a Group Policy Object.

Medium

Access This Computer From The Network Policy Changed

Created when the Computer policy Access This Computer From The Network setting is changed in a Group Policy Object.

Medium

Account Lockout Duration Policy Changed

Created when the Computer policy Account Lockout Duration setting is changed in a Group Policy Object.

Medium

Account Lockout Threshold Policy Changed

Created when the Computer policy Account Lockout Threshold setting is changed in a Group Policy Object.

Medium

Account Logon: Audit Credential Validation Changed

Created when the Account Logon: Audit Credential Validation policy setting changed in a Group Policy Object.

Medium

Account Logon: Audit Kerberos Authentication Service Changed

Created when the Account Logon: Audit Kerberos Authentication Service policy setting changed in a Group Policy Object.

Medium

Account Logon: Audit Kerberos Service Ticket Operations Changed

Created when the Account Logon: Audit Kerberos Service Ticket Operations policy setting is changed in a Group Policy Object.

Medium

Account Logon: Audit Other Account Logon Events Changed

Created when the Account Logon: Audit Other Application Logon Events policy setting is changed in a Group Policy Object.

Medium

Account Management: Audit Application Group Management Changed

Created when the Account Management: Audit Application Group Management policy setting is changed in a Group Policy Object.

Medium

Account Management: Audit Computer Account Management Changed

Created when the Account Management: Audit Computer Account Management policy setting is changed in a Group Policy Object.

Medium

Account Management: Audit Distribution Group Management Changed

Created when the Account Management: Audit Distribution Group Management policy setting is changed in a Group Policy Object.

Medium

Account Management: Audit Other Account Management Events Changed

Created when the Account Management: Audit Other Account Management Events policy setting is changed in a Group Policy Object.

Medium

Account Management: Audit Security Group Management Changed

Created when the Account Management: Audit Security Group Management policy setting is changed in a Group Policy Object.

Medium

Account Management: Audit User Account Management Changed

Created when the Account Management: Audit User Account Management policy setting is changed in a Group Policy Object.

Medium

Accounts: Administrator Account Status Policy Changed

Created when the Accounts: Administrator Account Status setting is changed in a Group Policy Object.

Medium

Accounts: Guest Account Status Policy Changed

Created when the Accounts: Guest Account Status setting is changed in a Group Policy Object.

Medium

Accounts: Limit Local Account Use Of Blank Passwords To Console Logon Only Policy Changed

Created when the Accounts: Limit Local Account Use Of Blank Passwords To Console Logon Only setting is changed in a Group Policy Object.

Medium

Accounts: Rename Administrator Account Policy Changed

Created when the Accounts: Rename Administrator Account is changed in a Group Policy Object.

Medium

Accounts: Rename Guest Account Policy Changed

Created when the Accounts: Rename Guest Account is changed in a Group Policy Object.

Medium

Act As Part Of The Operating System Policy Changed

Created when the Computer policy Act As Part Of The Operating System setting is changed in a Group Policy Object.

Medium

Add Workstations to Domain Policy Changed

Created when the Computer policy Add Workstations to Domain setting is changed in a Group Policy Object.

Medium

Adjust Memory Quotas for a Process Policy Changed

Created when the Computer policy Adjust Memory Quotas for a Process setting is changed in a Group Policy Object.

Medium

Allow Log On Locally Policy Changed

Created when the Computer policy Allow Log On Locally setting is changed in a Group Policy Object.

Medium

Allow Log On Through Terminal Services Policy Changed

Created when the Computer policy Allow Log On Through Terminal Services setting is changed in a Group Policy Object.

Medium

Audit Account Logon Events Policy Changed

Created when the Computer policy Audit Account Logon Events setting is changed in a Group Policy Object.

Medium

Audit Account Management Policy Changed

Created when the Computer policy Audit Account Management setting is changed in a Group Policy Object.

Medium

Audit Directory Service Access Policy Changed

Created when the Computer policy Audit Directory Service Access setting is changed in a Group Policy Object.

Medium

Audit Logon Events Policy Changed

Created when the Computer policy Audit Logon Events setting is changed in a Group Policy Object.

Medium

Audit Object Access Policy Changed

Created when the Computer policy Audit Object Access setting is changed in a Group Policy Object.

Medium

Audit Policy Change Policy Changed

Created when the Computer policy Audit Policy Change setting is changed in a Group Policy Object.

Medium

Audit Privilege Use Policy Changed

Created when the Computer policy Audit Privilege Use setting is changed in a Group Policy Object.

Medium

Audit Process Tracking Policy Changed

Created when the Computer policy Audit Process Tracking setting is changed in a Group Policy Object.

Medium

Audit System Events Policy Changed

Created when the Computer policy Audit System Events setting is changed in a Group Policy Object.

Medium

Audit: Audit the Access of Global System Objects Policy Changed

Created when the Audit: Audit the Access of Global System Objects setting is changed in a Group Policy Object.

Medium

Audit: Audit the Use of Backup and Restore Privilege Policy Changed

Created when the Audit: Audit the Use of Backup and Restore Privilege setting is changed in a Group Policy Object.

Medium

Audit: Force Audit Policy Subcategory Settings (Windows Vista or later) to Override Audit Policy Category Settings

Created when the Audit: Force Audit Policy Subcategory Settings (Windows Vista or later) to Override Audit Policy Category Settings policy is changed in a Group Policy Object.

Medium

Audit: Shut Down System Immediately if Unable to Log Security Audits Policy Changed

Created when the Audit: Shut Down System Immediately if Unable to Log Security Audits setting is changed in a Group Policy Object.

Medium

Back Up Files and Directories Policy Changed

Created when the Computer policy Back Up Files And Directories setting is changed in a Group Policy Object.

Medium

BitLocker Drive Encryption Added

Created when the BitLocker Drive Encryption security feature is added to a Group Policy Object.

Medium

BitLocker Drive Encryption Changed

Created when the BitLocker Drive Encryption settings are changed on a Group Policy Object.

Medium

BitLocker Drive Encryption Removed

Created when the BitLocker Drive Encryption security feature is removed from a Group Policy Object.

Medium

Bypass Traverse Checking Policy Changed

Created when the Computer policy Bypass Traverse Checking setting is changed in a Group Policy Object.

Medium

Central Access Policy Added to Group Policy

Created when a Central Access Policy is added to a Group Policy.

Medium

Central Access Policy Removed From Group Policy

Created when a Central Access Policy is removed from a Group Policy.

Medium

Change the System Time Policy Changed

Created when the Computer policy Change The System Time setting is changed in a Group Policy Object.

Medium

Change the Time Zone

Created when the Change the Time Zone policy is changed in a Group Policy Object.

Medium

Computer Administrative Template Setting Changed

Created when a setting associated with a Computer Administrative Template is enabled, changed, or disabled.

Medium

Computer Group Policy Preference Setting Changed

Created when a computer preference in a group policy is enabled, changed, or disabled.

NOTE: Group policy preferences are available in Windows® 2008 Group Policy Editor.

Medium

Computer Group Policy Script setting changed

Created when a computer startup/shutdown script in a group policy is added, changed, or removed.

Medium

Computer Public Key Policies Autoenrollment Settings Changed

Created when any properties of Autoenrollment Settings in the Computer Configuration Public Key Policies Enterprise Trust list are changed.

Medium

Computer Public Key Policies Automatic Certificate Request Added

Created when an Automated Certificate Request is added to the Computer Configuration Public Key Policies Automated Certificate Request Settings.

Medium

Computer Public Key Policies Automatic Certificate Request Changed

Created when an Automated Certificate Request setting is changed in the Computer Configuration Public Key Policies Automated Certificate Request list.

Medium

Computer Public Key Policies Automatic Certificate Request Removed

Created when an Automated Certificate Request is removed from the Computer Configuration Public Key Policies Automated Certificate Request list.

Medium

Computer Public Key Policies Encrypting File System DRA Added

Created when a Data Recovery Agent (DRA) is added to the Computer Configuration Public Key Policies Encrypting File System list.

Medium

Computer Public Key Policies Encrypting File System DRA Changed

Created when a Data Recovery Agent (DRA) is changed in the Computer Configuration Public Key Policies Encrypting File System list.

Medium

Computer Public Key Policies Encrypting File System DRA Removed

Created when a Data Recovery Agent (DRA) is removed from the Computer Configuration Public Key Policies Encrypting File System list.

Medium

Computer Public Key Policies Enterprise Trust List Added

Created when a certificate is imported into the Computer Configuration Public Key Policies Enterprise Trust.

Medium

Computer Public Key Policies Enterprise Trust List Changed

Created when a certificate in the Computer Configuration Public Key Policies Enterprise Trust list is changed.

Medium

Computer Public Key Policies Enterprise Trust List Removed

Created when a certificate in the Computer Configuration Public Key Policies Enterprise Trust list is removed.

Medium

Computer Public Key Policies Trusted Root Certification Authority Added

Created when a certificate is imported into the Computer Configuration Public Key Policies Trusted Root Certification Authorities.

Medium

Computer Public Key Policies Trusted Root Certification Authority Changed

Created when a certificate in the Computer Configuration Public Key Policies Trusted Root Certification Authorities is changed.

Medium

Computer Public Key Policies Trusted Root Certification Authority Removed

Created when a certificate in the Computer Configuration Public Key Policies Trusted Root Certification Authorities is removed.

Medium

Computer Software Installation Policy Added

Created when a Software Installation is added to the Computer Configuration Group Policy.

Medium

Computer Software Installation Policy Changed

Created when a Software Installation is changed in the Computer Configuration Group Policy.

Medium

Computer Software Installation Policy Removed

Created when a Software Installation is removed from the Computer Configuration Group Policy.

Medium

Computer Software Restriction Basic User Hash Rule Added

Created when a Basic User Hash Rule has been added to Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Hash Rule Changed

Created when a Basic User Hash Rule has changed in Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Hash Rule Removed

Created when a Basic User Hash Rule removed from Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Path Rule Added

Created when a Basic User Path Rule has been added to Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Path Rule Changed

Created when a Basic User Path Rule has changed in Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Path Rule Removed

Created when a Basic User Path Rule has been removed from Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Zone Rule Added

Created when a Basic User Zone Rule added to Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Zone Rule Changed

Created when a Basic User Zone Rule changed in Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Basic User Zone Rule Removed

Created when a Basic User Zone Rule removed from Computer Configuration Software Restriction policies.

Medium

Computer Software Restriction Designated File Types Changed

Created when the Designated File Types policy is changed in the Software Restriction Policies.

Medium

Computer Software Restriction Disallowed Certificate Rule Added

Created when a Disallowed level Certificate Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Certificate Rule Changed

Created when a Disallowed level Certificate Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Certificate Rule Removed

Created when a Disallowed level Certificate Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Hash Rule Added

Created when a Disallowed level Hash Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Hash Rule Changed

Created when a Disallowed level Hash Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Hash Rule Removed

Created when a Disallowed level Hash Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Path Rule Added

Created when a Disallowed level Path Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Path Rule Changed

Created when a Disallowed level Path Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Path Rule Removed

Created when a Disallowed level Path Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Zone Rule Added

Created when a Disallowed level Zone Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Zone Rule Changed

Created when a Disallowed level Zone Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Disallowed Zone Rule Removed

Created when a Disallowed level Zone Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Enforcement Files Changed

Created when an Enforcement Policy Applicable Files option is changed in the Software Restriction Policies.

Medium

Computer Software Restriction Enforcement Users Changed

Created when an Enforcement Policy Applicable Users option is changed in the Software Restriction Policies.

Medium

Computer Software Restriction Policies Default Security Level Changed

Created when the default security level in the Computer Configuration Software Restriction Policies Security Levels folder is changed.

Medium

Computer Software Restriction Trusted Publishers Changed

Created when the Trusted Publisher policy is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Certificate Rule Added

Created when an Unrestricted level Certificate Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Certificate Rule Changed

Created when an Unrestricted level Certificate Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Certificate Rule Removed

Created when an Unrestricted level Certificate Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Hash Rule Added

Created when an Unrestricted level Hash Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Hash Rule Changed

Created when an Unrestricted level Hash Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Hash Rule Removed

Created when an Unrestricted level Hash Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Path Rule Added

Created when an Unrestricted level Path Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Path Rule Changed

Created when an Unrestricted level Path Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Path Rule Removed

Created when an Unrestricted level Path Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Zone Rule Added

Created when an Unrestricted level Zone Rule is added to the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Zone Rule Changed

Created when an Unrestricted level Zone Rule is changed in the Software Restriction Policies Additional Rules.

Medium

Computer Software Restriction Unrestricted Zone Rule Removed

Created when an Unrestricted level Zone Rule is removed from the Software Restriction Policies Additional Rules.

Medium

Create a Pagefile Policy Changed

Created when the Computer policy Create A Pagefile setting is changed in a Group Policy Object.

Medium

Create a Token Object Policy Changed

Created when the Computer policy Create A Token Object setting is changed in a Group Policy Object.

Medium

Create Global Objects Policy Changed

Created when the Computer policy Create Global Objects setting is changed in a Group Policy Object.

Medium

Create Permanent Shared Objects Policy Changed

Created when the Computer policy Create Permanent Shared Objects setting is changed in a Group Policy Object.

Medium

Create Symbolic Links

Created when the Create Symbolic Links policy is changed in a Group Policy Object.

Medium

DCOM: Machine Access Restrictions Policy Defined

Created when the DCOM: Machine Access Restrictions policy setting is defined on a Group Policy Object.

Medium

DCOM: Machine Access Restrictions Policy Undefined

Created when the DCOM: Machine Access Restrictions policy setting is undefined on a Group Policy Object.

Medium

DCOM: Machine Access Restrictions Security Settings Changed

Created when the DCOM: Machine Access Restrictions in Security Descriptor Definition (SDDL) Syntax security setting is changed in a Group Policy Object.

Medium

DCOM: Machine Launch Restrictions Policy Defined

Created when the DCOM: Machine Launch Restrictions policy setting is defined on a Group Policy Object.

Medium

DCOM: Machine Launch Restrictions Policy Undefined

Created when the DCOM: Machine Launch Restrictions policy setting is undefined on a Group Policy Object.

Medium

DCOM: Machine Launch Restrictions Security Settings Changed

Created when the DCOM: Machine Launch Restrictions in Security Descriptor Definition (SDDL) Syntax security setting is changed in a Group Policy Object.

Medium

Debug Programs Policy Changed

Created when the Computer policy Debug Programs setting is changed in a Group Policy Object.

Medium

Deny Access to this Computer from the Network Policy Changed

Created when the Computer policy Deny Access to this Computer from the Network setting is changed in a Group Policy Object.

Medium

Deny Log On as a Batch Job Policy Changed

Created when the Computer policy Deny Log On as a Batch Job setting is changed in a Group Policy Object.

Medium

Deny Log On as a Service Policy Changed

Created when the Computer policy Deny Log On As A Service setting is changed in a Group Policy Object.

Medium

Deny Log On Locally Policy Changed

Created when the Computer policy Deny Log On Locally setting is changed in a Group Policy Object.

Medium

Deny Log On Through Terminal Services /Remote Desktop Service Policy Changed

Created when the Computer policy Deny Log On Through Terminal Services setting is changed in a Group Policy Object.

Medium

Detailed Tracking: Audit DPAPI Activity Changed

Created when the Detailed Tracking: Audit DPAPI Activity policy setting is changed in a Group Policy Object.

Medium

Detailed Tracking: Audit Process Creation Changed

Created when the Detailed Tracking: Audit Process Creation policy setting is changed in a Group Policy Object.

Medium

Detailed Tracking: Audit Process Termination Changed

Created when the Detailed Tracking: Audit Process Termination policy setting is changed in a Group Policy Object.

Medium

Detailed Tracking: Audit RPC Events Changed

Created when the Detailed Tracking: Audit RPC Events policy setting is changed in a Group Policy Object.

Medium

Devices: Allow Undock Without Having to Logon Policy Changed

Created when the Devices: Allow Undock Without Having To Logon setting is changed in a Group Policy Object.

Medium

Devices: Allowed to Format and Eject Removable Media Policy Changed

Created when the Devices: Allowed To Format And Eject Removable Media setting is changed in a Group Policy Object.

Medium

Devices: Prevent Users from Installing Printer Drivers Policy Changed

Created when the Devices: Prevent Users From Installing Printer Drivers setting is changed in a Group Policy Object.

Medium

Devices: Restrict CD-ROM Access to Locally Logged-On User Only Policy Changed

Created when the Devices: Restrict CD-ROM Access To Locally Logged-On User Only setting is changed in a Group Policy Object.

Medium

Devices: Restrict Floppy Access to Locally Logged-On User Only Policy Changed

Created when the Devices: Restrict Floppy Access To Locally Logged-On User Only setting is changed in a Group Policy Object.

Medium

Devices: Unsigned Driver Installation Behavior Policy Changed

Created when the Devices: Unsigned Driver Installation Behavior setting is changed in a Group Policy Object.

Medium

Domain Controller: Allow Server Operators to Schedule Tasks Policy Changed

Created when the Domain controllers: Allow Server Operators To Schedule Tasks setting is changed in a Group Policy Object.

Medium

Domain Controller: LDAP Server Signing Requirements Policy Changed

Created when the Domain controllers: LDAP Server Signing Requirements setting is changed in a Group Policy Object.

Medium

Domain Controller: Refuse Machine Account Password Changes Policy Changed

Created when the Domain controllers: Refuse Machine Account Password Changes setting is changed in a Group Policy Object.

Medium

Domain Member: Digitally Encrypt or Sign Secure Channel Data (Always) Policy Changed

Created when the Domain Member: Digitally Encrypt Or Sign Secure Channel Data (Always) setting is changed in a Group Policy Object.

Medium

Domain Member: Digitally Encrypt Secure Channel Data (When Possible) Policy Changed

Created when the Domain Member: Digitally Encrypt Secure Channel Data (When Possible) setting is changed in a Group Policy Object.

Medium

Domain Member: Digitally Sign Secure Channel Data (When Possible) Policy Changed

Created when the Domain Member: Digitally Sign Secure Channel Data (When Possible) setting is changed in a Group Policy Object.

Medium

Domain Member: Disable Machine Account Password Changes Policy Changed

Created when the Domain Member: Disable Machine Account Password Changes setting is changed in a Group Policy Object.

Medium

Domain Member: Maximum Machine Account Password Age Policy Changed

Created when the Domain Member: Maximum Machine Account Password Age setting is changed in a Group Policy Object.

Medium

Domain Member: Require Strong (Windows 2000 or Later) Session Key Policy Changed

Created when the Domain Member: Require Strong (Windows 2000 Or Later) Session Key setting is changed in a Group Policy Object.

Medium

DS Access: Audit Detailed Directory Service Replication Changed

Created when the DS Access: Audit Detailed Directory Service Replication policy setting is changed in a Group Policy Object.

Medium

DS Access: Audit Directory Service Access Changed

Created when the DS Access: Audit Directory Service Access policy setting is changed in a Group Policy Object.

Medium

DS Access: Audit Directory Service Changes Changed

Created when the DS Access: Audit Directory Service Changes policy setting is changed in a Group Policy Object.

Medium

DS Access: Audit Directory Service Replication Changed

Created when the DS Access: Audit Directory Service Replication policy setting is changed in a Group Policy Object.

Medium

Enable Computer and User Accounts to be Trusted for Delegation Changed

Created when the Computer policy Enable Computer And User Accounts To Be Trusted For Delegation Policy setting is changed in a Group Policy Object.

Medium

Enforce Password History Policy Changed

Created when the Computer policy Enforce Password History setting is changed in a Group Policy Object.

Medium

Enforce User Logon Restrictions Policy Changed

Created when the Computer policy Enforce User Logon Restrictions setting is changed in a Group Policy Object.

Medium

File or Folder Added to File System Policy

Created when a registry key is added to the File System policy.

Medium

File or Folder Changed in File System Policy

Created when a file or folder is changed in the File System policy.

Medium

File or Folder Removed from File System Policy

Created when a file or folder is removed from the File System policy.

Medium

Force Shutdown from a Remote System Policy Changed

Created when the Computer policy Force Shutdown From A Remote System setting is changed in a Group Policy Object.

Medium

Generate Security Audits Policy Changed

Created when the Computer policy Generate Security Audits setting is changed in a Group Policy Object.

Medium

Global Object Access Auditing: File System Changed

Created when the Global Object Auditing: File System security policy is changed.

Medium

Global Object Access Auditing: Registry Changed

Create when the Global Object Auditing: Registry security policy is changed.

Medium

Group Added To Restricted Group Policy

Created when a group is added to the Restricted Group policy in a Group Policy Object.

Medium

Group Removed from Restricted Group Policy

Created when a group is removed from the Restricted Group policy in a Group Policy Object.

Medium

Impersonate a Client after Authentication Policy Changed

Created when the Computer policy Impersonate A Client After Authentication setting is changed in a Group Policy Object.

Medium

Increase a Process Working Set

Created when the Increase a Process Working Set policy is change in a Group Policy Object.

Medium

Increase Scheduling Priority Policy Changed

Created when the Computer policy Increase Scheduling Priority setting is changed in a Group Policy Object.

Medium

Interactive Logon: Display User Information When the Session is Locked Policy Changed

Created when the Interactive Logon: Display User Information When the Session is Locked setting is changed in a Group Policy Object.

Medium

Interactive Logon: Do Not Display Last User Name Policy Changed

Created when the Interactive Logon: Do Not Display Last User Name setting is changed in a Group Policy Object.

Medium

Interactive Logon: Do Not Require CTRL+ALT+DEL Policy Changed

Created when the Interactive Logon: Do Not Require CTRL+ALT+DEL setting is changed in a Group Policy Object.

Medium

Interactive Logon: Message Text for Users Attempting to Log On Policy Changed

Created when the Interactive Logon: Message Text For Users Attempting To Log On setting is changed in a Group Policy Object.

Medium

Interactive Logon: Message Title for Users Attempting to Log On Policy Changed

Created when the Interactive Logon: Message Title For Users Attempting To Log On setting is changed in a Group Policy Object.

Medium

Interactive Logon: Number Of Previous Logons To Cache (In Case Domain Controller is Not Available) Policy Changed

Created when the Interactive Logon: Number Of Previous Logons To Cache setting is changed in a Group Policy Object.

Medium

Interactive Logon: Prompt User to Change Password Before Expiration Policy Changed

Created when the Interactive Logon: Prompt User To Change Password Before Expiration setting is changed in a Group Policy Object.

Medium

Interactive Logon: Require Domain Controller Authentication to Unlock Workstation Policy Changed

Created when the Interactive Logon: Require Domain controller Authentication to Unlock Workstation setting is changed in a Group Policy Object.

Medium

Interactive Logon: Require Smart Card Policy Changed

Created when the Interactive Logon: Require Smart Card setting is changed in a Group Policy Object.

Medium

Interactive Logon: Smart Card Removal Behavior Policy Changed

Created when the Interactive Logon: Smart Card Removal Behavior setting is changed in a Group Policy Object.

Medium

Intermediate Certificate Authorities Added

Created when an Intermediate Certification Authorities (CA) certificate is added to a Group Policy Object.

Medium

Intermediate Certificate Authorities Changed

Created when the Intermediate Certification Authorities certificate is changed on a Group Policy Object.

Medium

Intermediate Certificate Authorities Removed

Created when an Intermediate Certification Authorities (CA) certificate is removed from a Group Policy Object.

Medium

IP Security Policy Assigned

Created when an IP Security Policy is assigned in the Computer Configuration Group Policy.

Medium

IP Security Policy Un-assigned

Created when an IP Security Policy is un-assigned in the Computer Configuration Group Policy.

Medium

Load and Unload Device Drivers Policy Changed

Created when the Computer policy Load And Unload Device Drivers setting is changed in a Group Policy Object.

Medium

Lock Pages in Memory Policy Changed

Created when the Computer policy Lock Pages In Memory setting is changed in a Group Policy Object.

Medium

Log On as a Batch Job Policy Changed

Created when the Computer policy Log On As A Batch Job setting is changed in a Group Policy Object.

Medium

Log On as a Service Policy Changed

Created when the Computer policy Log On As A Service setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit Account Lockout Changed

Created when the Logon/Logoff: Audit Account Lockout policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit IPsec Extended Mode Changed

Created when the Logon/Logoff: Audit IPsec Extended Mode policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit IPsec Main Mode Changed

Created when the Logon/Logoff: Audit IPsec Main Mode policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit IPsec Quick Mode Changed

Created when the Logon/Logoff: Audit IPsec Quick Mode policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit Logoff Changed

Created when the Logon/Logoff: Audit Logoff policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit Logon Changed

Created when the Logon/Logoff: Audit Logon policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit Network Policy Server Changed

Created when the Logon/Logoff: Audit Network Policy Server policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit Other Logon/Logoff Events Changed

Created when the Logon/Logoff: Audit Other Logon/Logoff Events policy setting is changed in a Group Policy Object.

Medium

Logon/Logoff: Audit Special Logon Changed

Created when the Logon/Logoff: Audit Special Logon policy setting is changed in a Group Policy Object.

Medium

Manage Auditing and Security Log Policy Changed

Created when the Manage Auditing And Security Log setting is changed in a Group Policy Object.

Medium

Maximum Application Log Size Policy Changed

Created when the Maximum Application Log Size setting is changed in a Group Policy Object.

Medium

Maximum Lifetime for Service Ticket Policy Changed

Created when the Computer policy Maximum Lifetime for Service Ticket setting is changed in a Group Policy Object.

Medium

Maximum Lifetime for User Ticket Policy Changed

Created when the Computer policy Maximum Lifetime for User Ticket setting is changed in a Group Policy Object.

Medium

Maximum Lifetime for User Ticket Renewal Policy Changed

Created when the Computer policy Maximum Lifetime for User Ticket Renewal setting is changed in a Group Policy Object.

Medium

Maximum Password Age Policy Changed

Created when the Computer policy Maximum Password Age setting is changed in a Group Policy Object.

Medium

Maximum Security Log Size Policy Changed

Created when the Maximum Security Log Size setting is changed in a Group Policy Object.

Medium

Maximum System Log Size Policy Changed

Created when the Maximum System Log Size setting is changed in a Group Policy Object.

Medium

Maximum Tolerance for Computer Clock Synchronization Policy Changed

Created when the Computer policy Maximum Tolerance for Computer Clock Synchronization setting is changed in a Group Policy Object.

Medium

Member Added to Group in the Restricted Group Policy

Created when a member is added to a group in the Restricted Group policy of a Group Policy Object.

Medium

Member Removed from Group in the Restricted Group Policy

Created when a member is removed from a group in the Restricted Group policy of a Group Policy Object.

Medium

Membership Added to Group in the Restricted Group Policy

Created when a membership is added to a group in the Restricted Group policy of a Group Policy Object.

Medium

Membership Removed from Group in the Restricted Group Policy

Created when a membership is removed from a group in the Restricted Group policy of a Group Policy Object.

Medium

Microsoft Network Client: Digitally Sign Communications (Always) Policy Changed

Created when the Microsoft® Network Client: Digitally Sign Communications (Always) setting is changed in a Group Policy Object.

Medium

Microsoft Network Client: Digitally Sign Communications (If Server Agrees) Policy Changed

Created when the Microsoft Network Client: Digitally Sign Communications (If Server Agrees) setting is changed in a Group Policy Object.

Medium

Microsoft Network Client: Send Unencrypted Password to Connect to Third-Party SMB Servers Policy Changed

Created when the Microsoft Network Client: Send Unencrypted Password to Connect to Third-Party SMB Servers setting is changed in a Group Policy Object.

Medium

Microsoft Network Server: Amount of Idle Time Required Before Suspending Sessions Policy Changed

Created when the Microsoft Network Server: Amount of Idle Time Required Before Suspending Sessions setting is changed in a Group Policy Object.

Medium

Microsoft Network Server: Digitally Sign Communications (Always) Policy Changed

Created when the Microsoft Network Server: Digitally Sign Communications (Always) setting is changed in a Group Policy Object.

Medium

Microsoft Network Server: Digitally Sign Communications (If Client Agrees) Policy Changed

Created when the Microsoft Network Server: Digitally Sign Communications (If Client Agrees) setting is changed in a Group Policy Object.

Medium

Microsoft Network Server: Disconnect Clients When Logon Hours Expire Policy Changed

Created when the Microsoft Network Server: Disconnect Clients When Logon Hours Expire setting is changed in a Group Policy Object.

Medium

Microsoft Network Server: Server SPN Target Name Validation Level

Created when the Microsoft Network Server: Server SPN Target Name Validation Level policy is changed in a Group Policy Object.

Medium

Minimum Password Age Policy Changed

Created when the Computer policy Minimum Password Age setting is changed in a Group Policy Object.

Medium

Minimum Password Length Policy Changed

Created when the Computer policy Minimum Password Length setting is changed in a Group Policy Object.

Medium

Modify an Object Label

Created when the Modify an Object Label policy is changed in a Group Policy Object.

Medium

Modify Firmware Environment Policy Changed

Created when the Modify Firmware Environment setting is changed in a Group Policy Object.

Medium

NAP Client Health Registration Settings: CSP Changed

Created when the Cryptographic Service Provider (CSP) is changed in a NAP client request policy.

Medium

NAP Client Health Registration Settings: CSP Key Length Changed

Created when the CSP asymmetric key length is changed in a NAP client request policy.

Medium

NAP Client Health Registration Settings: Hash Algorithm Changed

Created when the hash algorithm is changed in a NAP client request policy.

Medium

NAP Client Health Registration Settings: Require Server Verification Changed

Created when the server verification (HTTP) setting is enabled or disabled in a NAP client configuration.

Medium

NAP Client Health Registration Settings: Trusted Server Group Added

Created when a new trusted server group is created in a NAP client configuration.

Medium

NAP Client Health Registration Settings: Trusted Server Group Removed

Created when a trusted server group is removed from a NAP client configuration.

Medium

NAP Client Health Registration Settings: Trusted Server URL Added

Created when a new URL for a HRA server is added to the trusted server group in a NAP client configuration.

Medium

NAP Client Health Registration Settings: Trusted Server URL Changed

Created when an existing URL for a HRA server is modified in a NAP client configuration.

Medium

NAP Client Health Registration Settings: Trusted Server URL Removed

Created when a URL for a HRA server is removed from the trusted server group in a NAP client configuration.

Medium

NAP User Interface Description Changed

Created when the description field on the NAP Status User Interface properties dialog is changed for an NAP client configuration.

Medium

NAP User Interface Image File Changed

Created when the image file is changed on the NAP Status User Interface properties dialog for an NAP client configuration.

Medium

NAP User Interface Image File Name Changed

Created when the image file name is changed on the NAP Status User Interface properties dialog for an NAP client configuration.

Medium

NAP User Interface Title Changed

Created when the title field on the NAP Status User Interface properties dialog is changed for an NAP client configuration.

Medium

NAP: DHCP Quarantine Enforcement Client Changed

Created when the DHCP Quarantine Enforcement Client setting is enabled or disabled for an NAP client configuration.

Medium

NAP: EAP Quarantine Enforcement Client Changed

Created when the EAP Quarantine Enforcement Client setting is enabled or disabled for an NAP client configuration.

Medium

NAP: IPsec Relying Party Changed

Create when the IPsec Relying Party setting is enabled or disabled for an NAP client configuration.

Medium

NAP: RD Gateway Quarantine Enforcement Client Changed

Created when the RD Gateway Quarantine Enforcement Client setting is enabled or disabled for an NAP client configuration.

Medium

NAP: Remote Access Enforcement Client for Windows XP and Windows Vista Changed

Created when the Remote Access Enforcement Client for Windows XP and Windows Vista setting is enabled or disabled for an NAP client configuration.

Medium

NAP: Wireless EAPOL Enforcement Client for Windows XP Changed

Created when the Wireless EAPOL Enforcement Client for Windows XP setting is enabled or disabled for an NAP client configuration.

Medium

Network Access: Allow Anonymous SID/Name Translation Policy Changed

Created when the Network Access: Allow Anonymous SID/Name Translation setting is changed in a Group Policy Object.

Medium

Network Access: Do Not Allow Anonymous Enumeration of SAM Accounts And Shares Policy Changed

Created when the Network Access: Do Not Allow Anonymous Enumeration Of SAM Accounts and Shares setting is changed in a Group Policy Object.

Medium

Network Access: Do Not Allow Anonymous Enumeration of SAM Accounts Policy Changed

Created when the Network Access: Do Not Allow Anonymous Enumeration Of SAM Accounts setting is changed in a Group Policy Object.

Medium

Network Access: Do Not Allow Storage of Credentials or .NET Passports for Network Authentication Policy Changed

Created when the Network Access: Do Not Allow Storage of Credentials or .NET Passports for Network Authentication setting is changed in a Group Policy Object.

Medium

Network Access: Let Everyone Permissions Apply to Anonymous Users Policy Changed

Created when the Network Access: Let Everyone Permissions Apply to Anonymous Users setting is changed in a Group Policy Object.

Medium

Network Access: Named Pipes that can be Accessed Anonymously Policy Changed

Created when the Network Access: Named Pipes that can be Accessed Anonymously setting is changed in a Group Policy Object.

Medium

Network Access: Remotely Accessible Registry Paths and Sub-Paths Changed

Created when the Network Access: Remotely Accessible Registry Paths And Sub-Paths setting is changed in a Group Policy Object.

Medium

Network Access: Remotely Accessible Registry Paths Policy Changed

Created when the Network Access: Remotely Accessible Registry Paths setting is changed in a Group Policy Object.

Medium

Network Access: Restrict Anonymous Access to Named Pipes and Shares Policy Changed

Created when the Network Access: Restrict Anonymous Access To Named Pipes and Shares setting is changed in a Group Policy Object.

Medium

Network Access: Shares that can be Accessed Anonymously Policy Changed

Created when the Network Access: Shares that can be Accessed Anonymously setting is changed in a Group Policy Object.

Medium

Network Access: Sharing and Security Model for Local Accounts Changed

Created when the Network Access: Sharing and Security Model for Local Accounts setting is changed in a Group Policy Object.

Medium

Network Security: Allow Local System to Use Computer Identity for NTLM

Created when the Network Security: Allow Local System to Use Computer Identity for NTLM setting is changed in a Group Policy Object.

Medium

Network Security: Allow LocalSystem NULL Session Fallback

Created when the Network Security: Allow LocalSystem NULL Session Fallback setting is changed in a Group Policy Object.

Medium

Network Security: Allow PKU2U Authentication Requests to this Computer to use Online Identities

Created when the Network Security: Allow PKU2U Authentication Requests to this Computer to use Online Identities setting is changed in a Group Policy Object.

Medium

Network Security: Configure Encryption Types Allowed for Kerberos

Created when the Network Security: Configure Encryption Types Allowed for Kerberos setting is changed in a Group Policy Object.

Medium

Network Security: Do Not Store LAN Manager Hash Value on Next Password Change Policy Changed

Created when the Network Security: Do Not Store LAN Manager Hash Value on Next Password Change setting is changed in a Group Policy Object.

Medium

Network Security: Force Logoff When Logon Hours Expire Policy Changed

Created when the Network Security: Force Logoff When Logon Hours Expire setting is changed in a Group Policy Object.

Medium

Network Security: LAN Manager Authentication Level Policy Changed

Created when the Network Security: LAN Manager Authentication Level setting is changed in a Group Policy Object.

Medium

Network Security: LDAP Client Signing Requirements Policy Changed

Created when the Network Security: LDAP Client Signing Requirements setting is changed in a Group Policy Object.

Medium

Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Clients Policy Changed

Created when the Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Clients setting is changed in a Group Policy Object.

Medium

Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Servers Policy Changed

Created when the Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Servers setting is changed in a Group Policy Object.

Medium

Network Security: Restrict NTLM: Add Remote Server Exceptions for NTLM Authentication

Created when the Network Security: Restrict NTLM: Add Remote Server Exceptions for NTLM Authentication policy setting is changed in a Group Policy Object.

Medium

Network Security: Restrict NTLM: Add Server Exceptions in This Domain

Created when the Network Security: Restrict NTLM: Add Server Exceptions in This Domain policy setting is changed in a Group Policy Object.

Medium

Network Security: Restrict NTLM: Audit Incoming NTLM Traffic

Created when the Network Security: Restrict NTLM: Audit Incoming NTLM Traffic policy setting is changed in a Group Policy Object.

Medium

Network Security: Restrict NTLM: Audit NTLM Authentication in This Domain

Created when the Network Security: Restrict NTLM: Audit NTLM Authentication in This Domain policy setting is changed in a Group Policy Object.

Medium

Network Security: Restrict NTLM: Incoming NTLM Traffic

Created when the Network Security: Restrict NTLM: Incoming NTLM Traffic policy setting is changed in a Group Policy Object.

Medium

Network Security: Restrict NTLM: NTLM Authentication in This Domain

Created when the Network Security: Restrict NTLM: NTLM Authentication in This Domain policy setting is changed in a Group Policy Object.

Medium

Network Security: Restrict NTLM: Outgoing NTLM Traffic to Remote Servers

Created when the Network Security: Restrict NTLM: Outgoing NTLM Traffic to Remote Servers policy setting is changed in a Group Policy Object.

Medium

NLM: Location Type Added

Created when an NLM: Location Type is added to a Group Policy Object.

Medium

NLM: Location Type Changed

Created when an NLM: Location Type is changed in a Group Policy Object.

Medium

NLM: Location Type Permissions Added

Created when an NLM: Location Type Permission is added to a Group Policy Object.

Medium

NLM: Location Type Permissions Changed

Created when an NLM: Location Type Permission is changed in a Group Policy Object.

Medium

NLM: Location Type Permissions Removed

Created when an NLM: Location Type Permission is removed from a Group Policy Object.

Medium

NLM: Location Type Removed

Created when an NLM: Location Type is removed from a Group Policy Object.

Medium

NLM: Network Icon Added

Created when an NLM: Network Icon is added to a Group Policy Object.

Medium

NLM: Network Icon Changed

Created when an NLM: Network Icon is changed in a Group Policy Object.

Medium

NLM: Network Icon Permissions Added

Created when an NLM: Network Icon Permission is added to a Group Policy Object.

Medium

NLM: Network Icon Permissions Changed

Created when an NLM: Network Icon Permission is changed in a Group Policy Object.

Medium

NLM: Network Icon Permissions Removed

Created when an NLM: Network Icon Permission is removed from a Group Policy Object.

Medium

NLM: Network Icon Removed

Created when an NLM: Network Icon is removed from a Group Policy Object.

Medium

NLM: Network Name Added

Created when an NLM: Network Name is added to a Group Policy Object.

Medium

NLM: Network Name Changed

Created when an NLM: Network Name is changed in a Group Policy Object.

Medium

NLM: Network Name Permissions Added

Created when an NLM: Network Name Permission is added to a Group Policy Object.

Medium

NLM: Network Name Permissions Changed

Created when an NLM: Network Name Permission is changed in a Group Policy Object.

Medium

NLM: Network Name Permissions Removed

Created when an NLM: Network Name Permission is removed from a Group Policy Object.

Medium

NLM: Network Name Removed

Created when an NLM: Network Name is removed from a Group Policy Object.

Medium

Object Access: Audit Application Generated Changed

Created when the Object Access: Audit Application Generated policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit Certification Services Changed

Created when the Object Access: Audit Certification Services policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit File Share Changed

Created when the Object Access: Audit File Share policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit File System Changed

Created when the Object Access: Audit File System policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit Filtering Platform Connection Changed

Created when the Object Access: Audit Filtering Platform Connection policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit Filtering Platform Packet Drop Changed

Created when the Object Access: Audit Filtering Platform Packet Drop policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit Handle Manipulation Changed

Created when the Object Access: Audit Handle Manipulation policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit Kernel Object Changed

Created when the Object Access: Audit Kernel Object policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit Other Object Access Events Changed

Created when the Object Access: Audit Other Object Access Events policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit Registry Changed

Created when the Object Access: Audit Registry policy setting is changed in a Group Policy Object.

Medium

Object Access: Audit SAM Changed

Created when the Object Access: Audit SAM policy setting is changed in a Group Policy Object.

Medium

Object Access: Detailed File Share Changed

Created when the Object Access: Audit Detailed File Share policy setting is changed in a Group Policy Object.

Medium

Password Must Meet Complexity Requirements Policy Changed

Created when the Computer policy Password Must Meet Complexity Requirements setting is changed in a Group Policy Object.

Medium

Perform Volume Maintenance Tasks Policy Changed

Created when the Perform Volume Maintenance Tasks setting is changed in a Group Policy Object.

Medium

Permissions Changed on a System Services Policy

Created when permissions change in a System Services Policy in a Group Policy Object.

Medium

Policy Change: Audit Audit Policy Change Changed

Created when the Policy Change: Audit Audit Policy Change security setting is changed in a Group Policy Object.

Medium

Policy Change: Audit Authentication Policy Change Changed

Created when the Policy Change: Audit Authentication Policy Change security setting is changed in a Group Policy Object.

Medium

Policy Change: Audit Authorization Policy Change Changed

Created when the Policy Change: Audit Authorization Policy Change security setting is changed in a Group Policy Object.

Medium

Policy Change: Audit Filtering Platform Policy Change Changed

Created when the Policy Change: Audit Filtering Platform Policy Change security setting is changed in a Group Policy Object.

Medium

Policy Change: Audit MPSSVC Rule-Level Policy Change Changed

Created when the Policy Change: Audit MPSSVC Rule-Level Policy Change security setting is changed in a Group Policy Object.

Medium

Policy Change: Audit Other Policy Change Events Changed

Created when the Policy Change: Audit Other Policy Change Events security setting is changed in a Group Policy Object.

Medium

Prevent Local Guests Group from Accessing Application Log Policy Change

Created when the Prevent Local Guests Group from Accessing Application Log setting is changed in a Group Policy Object.

Medium

Prevent Local Guests Group from Accessing Security Log Policy Changed

Created when the Prevent Local Guests Group from Accessing Security Log setting is changed in a Group Policy Object.

Medium

Prevent Local Guests Group From Accessing System Log Policy Changed

Created when the Prevent Local Guests Group From Accessing System Log setting is changed in a Group Policy Object.

Medium

Privilege Use: Audit Non Sensitive Privilege Use Changed

Created when the Privilege Use: Audit Non Sensitive Privilege Use security setting is changed in a Group Policy Object.

Medium

Privilege Use: Audit Other Privilege Use Events Changed

Created when the Privilege Use: Audit Other Privilege Use Events security setting is changed in a Group Policy Object.

Medium

Privilege Use: Audit Sensitive Privilege Use Changed

Created when the Privilege Use: Audit Sensitive Privilege Use security setting is changed in a Group Policy Object.

Medium

Profile Single Process Policy Changed

Created when the Profile Single Process setting is changed in a Group Policy Object.

Medium

Profile System Performance Policy Changed

Created when the Profile System Performance setting is changed in a Group Policy Object.

Medium

QoS Policy: Application Name Changed

Created when the application name specified in a QoS policy is changed.

Medium

QoS Policy: DSCP Value Changed

Created when the DSCP value specified in a QoS policy is changed.

Medium

QoS Policy: Local IP Changed

Created when the source IP address specified in a QoS policy is changed.

Medium

QoS Policy: Local IP Prefix Length Changed

Created when the prefix length of the source IP address specified in a QoS policy is changed.

Medium

QoS Policy: Local Port Changed

Created when the source port specified in a Qos policy is changed.

Medium

QoS Policy: Protocol Changed

Created when the protocol to which a QoS policy applies is changed.

Medium

QoS Policy: Remote IP Changed

Created when the destination IP address specified in a QoS policy is changed.

Medium

QoS Policy: Remote IP Prefix Length Changed

Created when the prefix length of the destination IP address specified in a QoS policy is changed.

Medium

QoS Policy: Remote Port Changed

Created when the destination port specified in a QoS policy is changed.

Medium

QoS Policy: Throttle Rate Changed

Created when the traffic throttle rate setting or value is modified in a QoS policy.

Medium

QoS Policy: URL Changed

Created when HTTP or HTTPS URL specified in a QoS policy is changed.

Medium

QoS Policy: URL Recursive Changed

Created when the Include subdirectories and files option is enabled or disabled for a QoS policy.

Medium

QoS Policy: Version Changed

Created when the version specified in a QoS policy is changed.

Medium

Recovery Console: Allow Automatic Administrative Logon Policy Changed

Created when the Recovery Console: Allow Automatic Administrative Logon setting is changed in a Group Policy Object.

Medium

Recovery Console: Allow Floppy Copy And Access Policy Changed

Created when the Recovery Console: Allow Floppy Copy And Access To All Drives And All Folders setting is changed in a Group Policy Object.

Medium

Registry Key Added to Registry Policy

Created when a registry key is added to the Registry policy.

Medium

Registry Key Changed in Registry Policy

Created when a registry key is changed in the Registry policy.

Medium

Registry Key Removed from Registry Policy

Created when a registry key is removed from the Registry policy.

Medium

Remove Computer from Docking Station Policy Changed

Created when the Remove Computer From Docking Station setting is changed in a Group Policy Object.

Medium

Replace a Process Level Token Policy Changed

Created when the Replace a Process Level Token setting is changed in a Group Policy Object.

Medium

Reset Account Lockout Counter After Change Policy Changed

Created when the Computer policy Reset Account Lockout Counter After Change setting is changed in a Group Policy Object.

Medium

Restore Files and Directories Policy Changed

Created when the Restore Files and Directories setting is changed in a Group Policy Object.

Medium

Retain Application Log Policy Changed

Created when the Retain Application Log setting is changed in a Group Policy Object.

Medium

Retain Security Log Policy Changed

Created when the Retain Security Log setting is changed in a Group Policy Object.

Medium

Retain System Log Policy Changed

Created when the Retain System Log setting is changed in a Group Policy Object.

Medium

Retention Method for Application Log Policy Changed

Created when the Retention Method For Application Log setting is changed in a Group Policy Object.

Medium

Retention Method for Security Log Policy Changed

Created when the Retention Method For Security Log setting is changed in a Group Policy Object.

Medium

Retention Method for System Log Policy Changed

Created when the Retention Method For System Log setting is changed in a Group Policy Object.

Medium

Secure System Partition (For RISC Platforms only) Policy Changed

Created when the Secure System Partition (For RISC Platforms Only) setting is changed in a Group Policy Object.

Medium

Service Defined in System Services Policy

Created when a service is marked as defined in the System Services policy.

Medium

Service Startup Changed in System Services Policy

Created when a service startup is marked as changed in the System Services policy.

Medium

Service Undefined in System Services Policy

Created when a service is undefined from the System Services policy.

Medium

Shut Down the Computer When the Security Audit Log is Full Policy Changed

Created when the Shut Down the Computer When the Security Audit Log is Full setting is changed in a Group Policy Object.

Medium

Shut Down the System Policy Changed

Created when the Shut Down the System setting is changed in a Group Policy Object.

Medium

Shutdown: Allow System to be Shut Down Without Having to Log On Policy Changed

Created when the Allow System to be Shut Down Without Having to Log On setting is changed in a Group Policy Object.

Medium

Shutdown: Clear Virtual Memory Pagefile Policy Changed

Created when the Clear Virtual Memory Pagefile When System Shuts Down setting is changed in a Group Policy Object.

Medium

Starter GPO Computer Setting Changed

Created when a Computer Configuration policy setting is changed for a Starter GPO.

Medium

Starter GPO User Setting Changed

Created when a User Configuration policy setting is changed for a Starter GPO.

Medium

Store Passwords Using Reversible Encryption Policy Changed

Created when the Computer policy Store Passwords Using Reversible Encryption setting is changed in a Group Policy Object.

Medium

Synchronize Directory Service Data Policy Changed

Created when the Synchronize Directory Service Data setting is changed in a Group Policy Object.

Medium

System Cryptography: Force Strong Key Protection for User Keys Stored on the Computer Policy Changed

Created when the System Cryptography: Force Strong Key Protection For User Keys Stored On The Computer setting is changed in a Group Policy Object.

Medium

System Cryptography: Use FIPS Compliant Algorithms for Encryption, Hashing, and Signing Policy Changed

Created when the System Cryptography: Use FIPS Compliant Algorithms For Encryption, Hashing, and Signing setting is changed in a Group Policy Object.

Medium

System Objects: Default Owner for Objects Created by Members of the Administrators Group Policy Changed

Created when the System Objects: Default Owner For Objects Created By Members Of The Administrators Group setting is changed in a Group Policy Object.

Medium

System Objects: Require Case Insensitivity for Non-Windows Subsystems Policy Changed

Created when the System Objects: Require Case Insensitivity For Non-Windows Subsystems setting is changed in a Group Policy Object.

Medium

System Objects: Strengthen Default Permissions of Global System Objects (e.g. Symbolic Links) Policy Changed

Created when the System Objects: Strengthen Default Permissions Of Global System Objects setting is changed in a Group Policy Object.

Medium

System Objects: Strengthen Default Permissions of Internal System Objects (e.g. Symbolic Links) Policy Changed

Created when the System Objects: Strengthen Default Permissions Of Internal System Objects setting is changed in a Group Policy Object.

Medium

System Settings: Optional Subsystems Policy Changed

Created when the System Settings: Optional Subsystems setting is changed in a Group Policy Object.

Medium

System Settings: Use Certificate Rules on Windows Executables for Software Restriction Policies Policy Changed

Created when the System Settings: Use Certificate Rules on Windows Executables for Software Restriction Policies setting is changed in a Group Policy Object.

Medium

System: Audit IPsec Driver Changed

Created when the System: Audit IPsec Driver security setting is changed in a Group Policy Object.

Medium

System: Audit Other System Events Changed

Created when the System: Audit Other System Events security setting is changed in a Group Policy Object.

Medium

System: Audit Security State Change Changed

Created when the System: Audit Security State Change security setting is changed in a Group Policy Object.

Medium

System: Audit Security System Extension Changed

Created when the System: Audit Security System Extension security setting is changed in a Group Policy Object.

Medium

System: Audit System Integrity Changed

Created when the System: Audit System Integrity security setting is changed in a Group Policy Object.

Medium

Take Ownership of Files or Other Objects Policy Changed

Created when the Take Ownership of Files or Other Objects setting is changed in a Group Policy Object.

Medium

Trusted People Added

Created when a Trusted People certificate is added to a Group Policy Object.

Medium

Trusted People Changed

Created when a Trusted People certificate is changed in a Group Policy Object.

Medium

Trusted People Removed

Created when a Trusted People certificate is removed from a Group Policy Object.

Medium

Unsigned Non-Driver Installation Behavior Policy Changed

Created when the Unsigned Non-Driver Installation Behavior setting is changed in a Group Policy Object.

Low

User Account Control: Admin Approval Mode for the Built-in Administrator Account

Created when the User Account Control: Admin Approval Mode for the Built-in Administration Account policy is changed in a Group Policy Object.

Medium

User Account Control: Allow UIAccess Applications to Prompt for Evaluation Without Using the Secure Desktop

Created when the User Account Control: Allow UIAccess Applications to Prompt for Evaluation Without Using the Secure Desktop policy is changed in a Group Policy Object.

Medium

User Account Control: Behavior of the Elevation Prompt for Administrators in Admin Approval Mode

Created when the User Account Control: Behavior of the Elevation Prompt for Administrators in Admin Approval Mode policy is changed in a Group Policy Object.

Medium

User Account Control: Behavior of the Elevation Prompt for Standard Users

Created when the User Account Control: Behavior of the Elevation Prompt for Standard Users policy is changed in a Group Policy Object.

Medium

User Account Control: Detect Application Installations and Prompt for Elevation

Created when the User Account Control: Detect Application Installations and Prompt for Elevation policy is changed in a Group Policy Object.

Medium

User Account Control: Only Elevate Executables that are Signed and Validated

Created when the User Account Control: Only Elevate Executables that are Signed and Validated policy is changed in a Group Policy Object.

Medium

User Account Control: Only Elevate UIAccess Applications that are Installed in Secure Locations

Created when the User Account Control: Only Elevate UIAccess Applications that are Installed in Secure Locations policy is changed in a Group Policy Object.

Medium

User Account Control: Run All Administrators in Admin Approval Mode

Created when the User Account Control: Run All Administrators in Admin Approval Mode policy is changed in a Group Policy Object.

Medium

User Account Control: Switch to the Secure Desktop When Prompting for Elevation

Created when the User Account Control: Switch to the Secure Desktop When Prompting for Elevation policy is changed in a Group Policy Object.

Medium

User Account Control: Virtualize File and Registry Write Failures to Per-User Locations

Created when the User Account Control: Virtualize File and Registry Write Failures to Per-User Locations policy is changed in a Group Policy Object.

Medium

User Administrative Template Setting Changed

Created when a setting associated with a User Administrative Template is enabled, changed, or disabled.

Medium

User Application Data Folder Redirection Options Changed

Created when Settings properties of the Application Data policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Application Data Folder Redirection Target Path Changed

Created when Target properties of the Application Data policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Contacts Folder Redirection Options Changed

Created when Settings properties of the Contacts policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Contacts Folder Redirection Target Path Changed

Created when Target properties of the Contacts policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Credential Roaming Added

Created when user credential roaming is added to a Group Policy Object.

Medium

User Credential Roaming Changed

Created when changes are made to user credential roaming in a Group Policy Object.

Medium

User Credential Roaming Options Changed

Created when the user credential roaming options are changed in a Group Policy Object.

Medium

User Credential Roaming Removed

Created when user credential roaming is removed from a Group Policy Object.

Medium

User Desktop Folder Redirection Options Changed

Created when Settings properties of the Desktop policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Desktop Folder Redirection Target Path Changed

Created when Target properties of the Desktop policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Downloads Folder Redirection Options Changed

Created when Settings properties of the Downloads policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Downloads Folder Redirection Target Path Changed

Created when Target properties of the Downloads policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Favorites Folder Redirection Options Changed

Created when Settings properties of the Favorites policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Favorites Folder Redirection Target Path Changed

Created when Target properties of the Favorites policy are changed in the Windows Settings Folder Redirection Policies.

Medium

User Group Policy Preference Setting Changed

Created when a user preference in a group policy is enabled, changed, or disabled.

Medium

User Group Policy Script setting changed

Created when a computer startup/shutdown script in a group policy is added, changed, or removed.

Medium

User Internet Explorer Maintenance Automatic Browser Configuration Auto-config Option Changed

Created when the Automatic Configuration property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer® Maintenance Connections policies.

Medium

User Internet Explorer Maintenance Automatic Browser Configuration Auto-config Time Changed

Created when the Automatically Configure Every xx Minutes property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Internet Explorer Maintenance Automatic Browser Configuration Auto-config URL Changed

Created when the Auto-config URL property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies.

Medium

User Internet Explorer Maintenance Automatic Browser Configuration Auto-detect Option Changed

Created when the Automatic Detect property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies.

Medium

User Internet Explorer Maintenance Automatic Browser Auto-proxy URL Changed

Created when the Auto-proxy URL property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies.

Medium

User Internet Explorer Maintenance Browser Title Changed

Created when the User Internet Explorer Maintenance Browser Title setting is changed.

Medium

User Internet Explorer Maintenance Connection Delete Existing Option Changed

Created when the Remove Old Dial-up Connections property of the Connection Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies.

Medium

User Internet Explorer Maintenance Connections Settings Import Option Changed

Created when Import Settings property of the Connection Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies.

Medium

User Internet Explorer Maintenance Content Ratings Option Changed

Created when the Content Ratings property in the Security Zones and Content Ratings policy is changed in the Windows Settings Internet Explorer Maintenance Security policies.

Medium

User Internet Explorer Maintenance Enable Trusted Publisher Lockdown Option Changed

Created when the Enable Trusted Publisher Lockdown property in the Authenticode Settings policy is changed in the Windows Settings Internet Explorer Maintenance Security policies.

Medium

User Internet Explorer Maintenance Important URLs Home Page URL Changed

Created when the Customize Home Page property in the Important URLs policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies.

Medium

User Internet Explorer Maintenance Important URLs Online Support URL Changed

Created when the group policy setting for User Internet Maintenance Important URLs Help URL is changed.

Medium

User Internet Explorer Maintenance Important URLs Search Bar URL Changed

Created when the Customize Search Bar property in the Important URLs policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies.

Medium

User Internet Explorer Maintenance Large Animated Logo Changed

Created when the Large Animated Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies.

Medium

User Internet Explorer Maintenance Large Static Logo Changed

Created when the Large Static Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies.

Medium

User Internet Explorer Maintenance Program Settings Option Changed

Created when the Program Settings policy is changed in the Windows Settings Internet Explorer Maintenance Programs policies.

Medium

User Internet Explorer Maintenance Proxy Settings Configuration FTP Proxy Changed

Created when the FTP proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Internet Explorer Maintenance Proxy Settings Configuration Gopher Proxy Changed

Created when the Gopher proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Internet Explorer Maintenance Proxy Settings Configuration Secure Proxy Changed

Created when the Secure proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Internet Explorer Maintenance Proxy Settings HTTP Proxy Changed

Created when the HTTP proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Internet Explorer Maintenance Proxy Settings Proxy Exceptions Changed

Created when the Exceptions property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Internet Explorer Maintenance Proxy Settings Socks Proxy Changed

Created when the Socks proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Internet Explorer Maintenance Security Zones and Privacy Customization Option Changed

Created when the Security Zones and Privacy property in the Security Zones and Content Ratings policy is changed in the Windows Settings Internet Explorer Maintenance Security policies.

Medium

User Internet Explorer Maintenance Small Animated Logo Changed

Created when the Small Animated Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies.

Medium

User Internet Explorer Maintenance Small Static Logo Changed

Created when the Small Static Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies.

Medium

User Internet Explorer Maintenance Toolbar Background Bitmap Changed

Created when the Background property of the Browser Toolbar Customizations policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies.

Medium

User Internet Explorer Maintenance Toolbar Buttons Changed

Created when the Buttons property of the Browser Toolbar Customizations policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies.

Medium

User Internet Explorer Maintenance URLs Browser Favorites List Changed

Created when the Favorites property in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies.

Medium

User Internet Explorer Maintenance URLs Browser Links List Changed

Created when the Links property in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies.

Medium

User Internet Explorer Maintenance URLs Favorites and Links Delete Existing Channels Option Changed

Created when the Delete Existing Channels option in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies.

Medium

User Internet Explorer Maintenance URLs Favorites and Links Delete Existing Favorites Option Changed

Created when the Delete Existing Favorites and Links option in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies.

Medium

User Internet Explorer Maintenance URLs Favorites and Links Top of List Option Changed

Created when the Place Favorites and Links at the Top of the List option in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies.

Medium

User Internet Explorer Maintenance User Agent String Changed

Created when the User Agent String policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies.

Medium

User Links Folder Redirection Options Changed

Created when Settings properties of the Links policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Links Folder Redirection Target Path Changed

Created when Target properties of the Links policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Music Folder Redirection Options Changed

Created when Settings properties of the Music policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Music Folder Redirection Target Path Changed

Created when Target properties of the Music policy are changed in the Windows Settings Folder Redirection policies.

Medium

User My Documents Folder My Pictures Preferences Changed

Created when My Pictures Settings properties of the My Documents policy are changed in the Windows Settings Folder Redirection policies.

Medium

User My Documents Folder Redirection Options Changed

Created when Settings (other than My Pictures) properties of the My Documents policy are changed in the Windows Settings Folder Redirection policies.

Medium

User My Documents Folder Redirection Target Path Changed

Created when Target properties of the My Documents policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Pictures Folder Redirection Options Changed

Created when Settings properties of the Pictures policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Pictures Folder Redirection Target Path Changed

Created when Target properties of the Pictures policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Public Key Policies Autoenrollment Settings Changed

Created when any properties of Autoenrollment Settings in the User Configuration Public Key Policies Enterprise Trust list is changed.

Medium

User Public Key Policies Enterprise Trust List Added

Created when a certificate is imported into the User Configuration Public Key Policies Enterprise Trust.

Medium

User Public Key Policies Enterprise Trust List Changed

Created when a certificate in the User Configuration Public Key Policies Enterprise Trust list is changed.

Medium

User Public Key Policies Enterprise Trust List Removed

Created when a certificate in the User Configuration Public Key Policies Enterprise Trust list is removed.

Medium

User Saved Games Folder Redirection Options Changed

Created when Settings properties of the Saved Games policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Saved Games Folder Redirection Target Path Changed

Created when Target properties of the Saved Games policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Searches Folder Redirection Options Changed

Created when Settings properties of the Searches policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Searches Folder Redirection Target Path Changed

Created when Target properties of the Searches policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Software Installation Policy Added

Created when a User Software Installation Policy is added to User Configuration in Software Restriction policies.

Medium

User Software Installation Policy Changed

Created when a User Software Installation Policy is Changed in the User Configuration in Software Restriction policies.

Medium

User Software Installation Policy Removed

Created when a User Software Installation Policy is deleted from the User Configuration in Software Restriction policies.

Medium

User Software Restriction Basic User Hash Rule Added

Created when a Basic User Hash Rule is added to User Configuration Software Restriction policies.

Medium

User Software Restriction Basic User Hash Rule Changed

Created when a Basic User Hash Rule is changed in User Configuration Software Restriction policies.

Medium

User Software Restriction Basic User Hash Rule Removed

Created when a Basic User Hash Rule is removed from User Configuration Software Restriction policies.

Medium

User Software Restriction Basic User Path Rule Added

Created when a Basic User Path Rule is added to User Configuration Software Restriction policies.

Medium

User Software Restriction Basic User Path Rule Changed

Created when a Basic User Path Rule is changed in User Configuration Software Restriction policies.

Medium

User Software Restriction Basic User Path Rule Removed

Created when a Basic User Path Rule is removed in User Configuration Software Restriction.

Medium

User Software Restriction Basic User Zone Rule Added

Created when a Basic User Zone Rule is added to User Configuration Software Restriction policies.

Medium

User Software Restriction Basic User Zone Rule Changed

Created when a Basic User Zone Rule is changed in User Configuration Software Restriction policies.

Medium

User Software Restriction Basic User Zone Rule Removed

Created when a Basic User Zone Rule is removed in User Configuration Software Restriction.

Medium

User Software Restriction Designated File Types Changed

Created when the Designated File Types policy is changed in the Software Restriction Policies.

Medium

User Software Restriction Disallowed Certificate Rule Added

Created when a Disallowed level Certificate Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Certificate Rule Changed

Created when a Disallowed level Certificate Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Certificate Rule Removed

Created when a Disallowed level Certificate Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Hash Rule Added

Created when a Disallowed level Hash Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Hash Rule Changed

Created when a Disallowed level Hash Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Hash Rule Removed

Created when a Disallowed level Hash Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Path Rule Added

Created when a Disallowed level Path Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Path Rule Changed

Created when a Disallowed level Path Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Path Rule Removed

Created when a Disallowed level Path Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Zone Rule Added

Created when a Disallowed level Zone Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Zone Rule Changed

Created when a Disallowed level Zone Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Disallowed Zone Rule Removed

Created when a Disallowed level Zone Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Enforcement Files Changed

Created when an Enforcement Policy Applicable Files option is changed in the Software Restriction policies.

Medium

User Software Restriction Enforcement Users Changed

Created when an Enforcement Policy Applicable Users option is changed in the Software Restriction policies.

Medium

User Software Restriction Policies Default Security Level Changed

Created when the default security level in the User Configuration Software Restriction Policies Security Levels folder is changed.

Medium

User Software Restriction Trusted Publishers Changed

Created when the Trusted Publishers policy is changed in the Software Restriction policies.

Medium

User Software Restriction Unrestricted Certificate Rule Added

Created when an Unrestricted level Certificate Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Certificate Rule Changed

Created when an Unrestricted level Certificate Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Certificate Rule Removed

Created when an Unrestricted level Certificate Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Hash Rule Added

Created when an Unrestricted level Hash Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Hash Rule Changed

Created when an Unrestricted level Hash Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Hash Rule Removed

Created when an Unrestricted level Hash Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Path Rule Added

Created when an Unrestricted level Path Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Path Rule Changed

Created when an Unrestricted level Path Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Path Rule Removed

Created when an Unrestricted level Path Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Zone Rule Added

Created when an Unrestricted level Zone Rule is added to the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Zone Rule Changed

Created when an Unrestricted level Zone Rule is changed in the Software Restriction Policies Additional Rules.

Medium

User Software Restriction Unrestricted Zone Rule Removed

Created when an Unrestricted level Zone Rule is removed from the Software Restriction Policies Additional Rules.

Medium

User Start Menu Folder Redirection Options Changed

Created when Settings properties of the Start Menu policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Start Menu Folder Redirection Target Path Changed

Created when Target properties of the Start Menu policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Videos Folder Redirection Options Changed

Created when Settings properties of the Videos policy are changed in the Windows Settings Folder Redirection policies.

Medium

User Videos Folder Redirection Target Path Changed

Created when Target properties of the Videos policy are changed in the Windows Settings Folder Redirection policies.

Medium

Wireless Network Policy Added

Created when a Wireless Network policy is added to the Computer Configuration Group Policy.

Medium

Wireless Network Policy Changed

Created when a Wireless Network policy in the Computer Configuration Group Policy is changed.

Medium

Wireless Network Policy Removed

Created when a Wireless Network policy is removed from the Computer Configuration Group Policy.

Medium

Group Policy Object

DACL Changed on Group Policy Object

Created when a DACL is changed on a group policy object.

High

Failed Group Policy Container Access (Change Auditor Protection)

Created when access to a group policy container is denied because it is locked down using the GPO protection feature of Change Auditor.

Medium

Failed Starter Group Policy Container Access (Change Auditor Protection)

Created when access to a Starter GPO is denied because it is locked down using the GPO protection feature of Change Auditor.

Medium

Group Policy Block Inheritance Setting Changed on Domain

Created when the block inheritance setting of a group policy linked to a domain is changed.

High

Group Policy Block Inheritance Setting Changed on OU

Created when the block inheritance setting of a group policy linked to an OU is changed.

High

Group Policy Block Inheritance Setting Changed on Site

Created when the blocked inheritance setting on a group policy linked to a site is changed.

High

Group Policy Disable Computer Configuration Flag Changed

Created when the disable computer configuration flag is changed.

Medium

Group Policy Disable User Configuration Flag Changed

Created when the disable user configuration flag is changed.

Medium

Group Policy Disabled Setting on Domain Changed

Created when the disabled setting of a group policy linked to a domain is changed.

High

Group Policy Disabled Setting on OU Changed

Created when the disabled setting of a group policy linked to an OU is changed.

Medium

Group Policy Disabled Setting on Site Changed

Created when the disabled setting of a group policy linked to a site is changed.

High

Group Policy Link Added to OU

Created when a group policy is associated with an OU.

High

Group Policy Link Added to Site

Created when a group policy link is associated with a site.

High

Group Policy Link Removed from OU

Created when a group policy link is disassociated from an OU.

High

Group Policy Link Removed from Site

Created when a group policy link is disassociated from a site.

High

Group Policy Link Settings Modified

Created when a group policy linked to an organizational unit has its flags attribute modified.

Medium

Group Policy Linked

Created when a group policy is linked to a domain.

High

Group Policy No Override Setting Changed on Domain

Created when the no override setting of a group policy linked to a domain is changed.

High

Group Policy No Override Setting Changed on OU

Created when the no override setting of a group policy linked to an OU is changed.

High

Group Policy No Override Setting Changed on Site

Created when the no override setting of a group policy linked to a site is changed.

High

Group Policy Object Added

Created when a group policy container is added to the policies container.

High

Group Policy Object Removed

Created when a group policy container is removed from the policies container.

High

Group Policy Object Renamed

Created when a group policy object is renamed.

High

Group Policy Unlinked

Created when a group policy link is detached from a domain.

High

Group Policy WMI Filter Changed

Created when the gPCWQLFilter attribute (WMI filter) of the objectClass=groupPolicyContainer is changed.

Medium

Inheritance Setting Changed on Group Policy Object

Created when the inheritance setting of a group policy object is changed.

High

Linked Group Policy on Domain Changed

Created when a group policy setting that is attached to a domain is changed.

High

Linked Group Policy on OU Changed

Created when a group policy setting that is attached to an OU is changed.

Medium

Linked Group Policy on Site Changed

Created when a group policy setting that is attached to the site is changed.

High

Owner Changed on Group Policy Object

Created when the owner is changed for a group policy object.

High

Starter GPO Created

Created when a Starter GPO is created.

Medium

Starter GPO Removed

Created when a Starter GPO is removed.

Medium

IP Security

IP Security Filter Action Created

Created when a new IP Security Filter Action is created.

Medium

IP Security Filter Action Deleted

Created when an IP Security Filter Action is removed.

Medium

IP Security Filter Action Option Changed

Created when an IP Security Filter Action Security option is changed.

Medium

IP Security Filter Action Security Method Changed

Created when an IP Security Filter Action Security Method is changed.

Medium

IP Security Filter List Created

Created when a new IP Security Filter List is created.

Medium

IP Security Filter List Deleted

Created when an IP Security Filter List is removed.

Medium

IP Security Filter List Option Changed

Created when an IP Security Filter List option is changed.

Medium

IP Security Policy Created

Created when a new IP Security setting is created in a domain.

Medium

IP Security Policy Deleted

Created when an IP Security setting is deleted from a domain.

Medium

IP Security Policy Key Exchange Settings Changed

Created when one or more key exchange settings are changed in an IP Security Policy.

Medium

IP Security Policy Option Changed

Created when one or more options are changed in an IP Security Policy.

Medium

IP Security Rule Created

Created when an IP Security Rule is created.

Medium

IP Security Rule Deleted

Created when an IP Security Rule is deleted.

Medium

IP Security Rule Filter Action Changed

Created when the Filter Action of an IP Security Rule is changed.

Medium

IP Security Rule Filter List Changed

Created when the Filter List of an IP Security Rule is changed.

Medium

IP Security Rule Option Changed

Created when one or more options are changed in an IP Security Rule.

Medium

Rule Added to IP Security Policy Rule List

Created when a rule is added (checked) to the IP Security Rule list of an IP Security Policy.

Medium

Rule Removed from IP Security Policy Rule List

Created when a rule is removed (cleared) from the IP Security Rule list of an IP Security Policy.

Medium

NETLOGON Service

NETLOGON AutoSiteCoverage Flag Changed

Created when the AutoSiteCoverage flag is changed.

Medium

NETLOGON CloseSiteTimeout Parameter Changed

Created when the CloseSiteTimeout value is changed.

Medium

NETLOGON Diagnostic Logging Parameter Changed

Created when the diagnostic log level for the NETLOGON service is changed.

Medium

NETLOGON DnsAvoidRegisterRecords Parameter Changed

Created when the contents of the DnsAvoidRegisterRecords registry entry is changed.

Medium

NETLOGON GcSiteCoverage Parameter Changed

Created when the GcSiteCoverage registry entry is changed.

Medium

NETLOGON LdapSrvPriority Parameter Changed

Created when the LdapSrvPriority registry entry is added, removed, or changed.

Medium

NETLOGON LdapSrvWeight Parameter Changed

Created when the LdapSrvWeight value is changed.

Medium

NETLOGON SiteCoverage Parameter Changed

Created when the contents of the SiteCoverage registry entry is changed.

Medium

NETLOGON SiteName Parameter Changed

Created when the SiteName registry entry is added, removed, or changed.

Medium

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级