|
|
|
|
|
Access Credential Manager as a Trusted Caller |
Created when the Access Credential Manager as a Trusted Caller policy is changed in a Group Policy Object. |
Medium |
|
Access This Computer From The Network Policy Changed |
Created when the Computer policy Access This Computer From The Network setting is changed in a Group Policy Object. |
Medium |
|
Account Lockout Duration Policy Changed |
Created when the Computer policy Account Lockout Duration setting is changed in a Group Policy Object. |
Medium |
|
Account Lockout Threshold Policy Changed |
Created when the Computer policy Account Lockout Threshold setting is changed in a Group Policy Object. |
Medium |
|
Account Logon: Audit Credential Validation Changed |
Created when the Account Logon: Audit Credential Validation policy setting changed in a Group Policy Object. |
Medium |
|
Account Logon: Audit Kerberos Authentication Service Changed |
Created when the Account Logon: Audit Kerberos Authentication Service policy setting changed in a Group Policy Object. |
Medium |
|
Account Logon: Audit Kerberos Service Ticket Operations Changed |
Created when the Account Logon: Audit Kerberos Service Ticket Operations policy setting is changed in a Group Policy Object. |
Medium |
|
Account Logon: Audit Other Account Logon Events Changed |
Created when the Account Logon: Audit Other Application Logon Events policy setting is changed in a Group Policy Object. |
Medium |
|
Account Management: Audit Application Group Management Changed |
Created when the Account Management: Audit Application Group Management policy setting is changed in a Group Policy Object. |
Medium |
|
Account Management: Audit Computer Account Management Changed |
Created when the Account Management: Audit Computer Account Management policy setting is changed in a Group Policy Object. |
Medium |
|
Account Management: Audit Distribution Group Management Changed |
Created when the Account Management: Audit Distribution Group Management policy setting is changed in a Group Policy Object. |
Medium |
|
Account Management: Audit Other Account Management Events Changed |
Created when the Account Management: Audit Other Account Management Events policy setting is changed in a Group Policy Object. |
Medium |
|
Account Management: Audit Security Group Management Changed |
Created when the Account Management: Audit Security Group Management policy setting is changed in a Group Policy Object. |
Medium |
|
Account Management: Audit User Account Management Changed |
Created when the Account Management: Audit User Account Management policy setting is changed in a Group Policy Object. |
Medium |
|
Accounts: Administrator Account Status Policy Changed |
Created when the Accounts: Administrator Account Status setting is changed in a Group Policy Object. |
Medium |
|
Accounts: Guest Account Status Policy Changed |
Created when the Accounts: Guest Account Status setting is changed in a Group Policy Object. |
Medium |
|
Accounts: Limit Local Account Use Of Blank Passwords To Console Logon Only Policy Changed |
Created when the Accounts: Limit Local Account Use Of Blank Passwords To Console Logon Only setting is changed in a Group Policy Object. |
Medium |
|
Accounts: Rename Administrator Account Policy Changed |
Created when the Accounts: Rename Administrator Account is changed in a Group Policy Object. |
Medium |
|
Accounts: Rename Guest Account Policy Changed |
Created when the Accounts: Rename Guest Account is changed in a Group Policy Object. |
Medium |
|
Act As Part Of The Operating System Policy Changed |
Created when the Computer policy Act As Part Of The Operating System setting is changed in a Group Policy Object. |
Medium |
|
Add Workstations to Domain Policy Changed |
Created when the Computer policy Add Workstations to Domain setting is changed in a Group Policy Object. |
Medium |
|
Adjust Memory Quotas for a Process Policy Changed |
Created when the Computer policy Adjust Memory Quotas for a Process setting is changed in a Group Policy Object. |
Medium |
|
Allow Log On Locally Policy Changed |
Created when the Computer policy Allow Log On Locally setting is changed in a Group Policy Object. |
Medium |
|
Allow Log On Through Terminal Services Policy Changed |
Created when the Computer policy Allow Log On Through Terminal Services setting is changed in a Group Policy Object. |
Medium |
|
Audit Account Logon Events Policy Changed |
Created when the Computer policy Audit Account Logon Events setting is changed in a Group Policy Object. |
Medium |
|
Audit Account Management Policy Changed |
Created when the Computer policy Audit Account Management setting is changed in a Group Policy Object. |
Medium |
|
Audit Directory Service Access Policy Changed |
Created when the Computer policy Audit Directory Service Access setting is changed in a Group Policy Object. |
Medium |
|
Audit Logon Events Policy Changed |
Created when the Computer policy Audit Logon Events setting is changed in a Group Policy Object. |
Medium |
|
Audit Object Access Policy Changed |
Created when the Computer policy Audit Object Access setting is changed in a Group Policy Object. |
Medium |
|
Audit Policy Change Policy Changed |
Created when the Computer policy Audit Policy Change setting is changed in a Group Policy Object. |
Medium |
|
Audit Privilege Use Policy Changed |
Created when the Computer policy Audit Privilege Use setting is changed in a Group Policy Object. |
Medium |
|
Audit Process Tracking Policy Changed |
Created when the Computer policy Audit Process Tracking setting is changed in a Group Policy Object. |
Medium |
|
Audit System Events Policy Changed |
Created when the Computer policy Audit System Events setting is changed in a Group Policy Object. |
Medium |
|
Audit: Audit the Access of Global System Objects Policy Changed |
Created when the Audit: Audit the Access of Global System Objects setting is changed in a Group Policy Object. |
Medium |
|
Audit: Audit the Use of Backup and Restore Privilege Policy Changed |
Created when the Audit: Audit the Use of Backup and Restore Privilege setting is changed in a Group Policy Object. |
Medium |
|
Audit: Force Audit Policy Subcategory Settings (Windows Vista or later) to Override Audit Policy Category Settings |
Created when the Audit: Force Audit Policy Subcategory Settings (Windows Vista or later) to Override Audit Policy Category Settings policy is changed in a Group Policy Object. |
Medium |
|
Audit: Shut Down System Immediately if Unable to Log Security Audits Policy Changed |
Created when the Audit: Shut Down System Immediately if Unable to Log Security Audits setting is changed in a Group Policy Object. |
Medium |
|
Back Up Files and Directories Policy Changed |
Created when the Computer policy Back Up Files And Directories setting is changed in a Group Policy Object. |
Medium |
|
BitLocker Drive Encryption Added |
Created when the BitLocker Drive Encryption security feature is added to a Group Policy Object. |
Medium |
|
BitLocker Drive Encryption Changed |
Created when the BitLocker Drive Encryption settings are changed on a Group Policy Object. |
Medium |
|
BitLocker Drive Encryption Removed |
Created when the BitLocker Drive Encryption security feature is removed from a Group Policy Object. |
Medium |
|
Bypass Traverse Checking Policy Changed |
Created when the Computer policy Bypass Traverse Checking setting is changed in a Group Policy Object. |
Medium |
|
Central Access Policy Added to Group Policy |
Created when a Central Access Policy is added to a Group Policy.
|
Medium |
|
Central Access Policy Removed From Group Policy |
Created when a Central Access Policy is removed from a Group Policy.
|
Medium |
|
Change the System Time Policy Changed |
Created when the Computer policy Change The System Time setting is changed in a Group Policy Object. |
Medium |
|
Change the Time Zone |
Created when the Change the Time Zone policy is changed in a Group Policy Object. |
Medium |
|
Computer Administrative Template Setting Changed |
Created when a setting associated with a Computer Administrative Template is enabled, changed, or disabled. |
Medium |
|
Computer Group Policy Preference Setting Changed |
Created when a computer preference in a group policy is enabled, changed, or disabled.
|
Medium |
|
Computer Group Policy Script setting changed |
Created when a computer startup/shutdown script in a group policy is added, changed, or removed. |
Medium |
|
Computer Public Key Policies Autoenrollment Settings Changed |
Created when any properties of Autoenrollment Settings in the Computer Configuration Public Key Policies Enterprise Trust list are changed. |
Medium |
|
Computer Public Key Policies Automatic Certificate Request Added |
Created when an Automated Certificate Request is added to the Computer Configuration Public Key Policies Automated Certificate Request Settings. |
Medium |
|
Computer Public Key Policies Automatic Certificate Request Changed |
Created when an Automated Certificate Request setting is changed in the Computer Configuration Public Key Policies Automated Certificate Request list. |
Medium |
|
Computer Public Key Policies Automatic Certificate Request Removed |
Created when an Automated Certificate Request is removed from the Computer Configuration Public Key Policies Automated Certificate Request list. |
Medium |
|
Computer Public Key Policies Encrypting File System DRA Added |
Created when a Data Recovery Agent (DRA) is added to the Computer Configuration Public Key Policies Encrypting File System list. |
Medium |
|
Computer Public Key Policies Encrypting File System DRA Changed |
Created when a Data Recovery Agent (DRA) is changed in the Computer Configuration Public Key Policies Encrypting File System list. |
Medium |
|
Computer Public Key Policies Encrypting File System DRA Removed |
Created when a Data Recovery Agent (DRA) is removed from the Computer Configuration Public Key Policies Encrypting File System list. |
Medium |
|
Computer Public Key Policies Enterprise Trust List Added |
Created when a certificate is imported into the Computer Configuration Public Key Policies Enterprise Trust. |
Medium |
|
Computer Public Key Policies Enterprise Trust List Changed |
Created when a certificate in the Computer Configuration Public Key Policies Enterprise Trust list is changed. |
Medium |
|
Computer Public Key Policies Enterprise Trust List Removed |
Created when a certificate in the Computer Configuration Public Key Policies Enterprise Trust list is removed. |
Medium |
|
Computer Public Key Policies Trusted Root Certification Authority Added |
Created when a certificate is imported into the Computer Configuration Public Key Policies Trusted Root Certification Authorities. |
Medium |
|
Computer Public Key Policies Trusted Root Certification Authority Changed |
Created when a certificate in the Computer Configuration Public Key Policies Trusted Root Certification Authorities is changed. |
Medium |
|
Computer Public Key Policies Trusted Root Certification Authority Removed |
Created when a certificate in the Computer Configuration Public Key Policies Trusted Root Certification Authorities is removed. |
Medium |
|
Computer Software Installation Policy Added |
Created when a Software Installation is added to the Computer Configuration Group Policy. |
Medium |
|
Computer Software Installation Policy Changed |
Created when a Software Installation is changed in the Computer Configuration Group Policy. |
Medium |
|
Computer Software Installation Policy Removed |
Created when a Software Installation is removed from the Computer Configuration Group Policy. |
Medium |
|
Computer Software Restriction Basic User Hash Rule Added |
Created when a Basic User Hash Rule has been added to Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Hash Rule Changed |
Created when a Basic User Hash Rule has changed in Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Hash Rule Removed |
Created when a Basic User Hash Rule removed from Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Path Rule Added |
Created when a Basic User Path Rule has been added to Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Path Rule Changed |
Created when a Basic User Path Rule has changed in Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Path Rule Removed |
Created when a Basic User Path Rule has been removed from Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Zone Rule Added |
Created when a Basic User Zone Rule added to Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Zone Rule Changed |
Created when a Basic User Zone Rule changed in Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Basic User Zone Rule Removed |
Created when a Basic User Zone Rule removed from Computer Configuration Software Restriction policies. |
Medium |
|
Computer Software Restriction Designated File Types Changed |
Created when the Designated File Types policy is changed in the Software Restriction Policies. |
Medium |
|
Computer Software Restriction Disallowed Certificate Rule Added |
Created when a Disallowed level Certificate Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Certificate Rule Changed |
Created when a Disallowed level Certificate Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Certificate Rule Removed |
Created when a Disallowed level Certificate Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Hash Rule Added |
Created when a Disallowed level Hash Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Hash Rule Changed |
Created when a Disallowed level Hash Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Hash Rule Removed |
Created when a Disallowed level Hash Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Path Rule Added |
Created when a Disallowed level Path Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Path Rule Changed |
Created when a Disallowed level Path Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Path Rule Removed |
Created when a Disallowed level Path Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Zone Rule Added |
Created when a Disallowed level Zone Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Zone Rule Changed |
Created when a Disallowed level Zone Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Disallowed Zone Rule Removed |
Created when a Disallowed level Zone Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Enforcement Files Changed |
Created when an Enforcement Policy Applicable Files option is changed in the Software Restriction Policies. |
Medium |
|
Computer Software Restriction Enforcement Users Changed |
Created when an Enforcement Policy Applicable Users option is changed in the Software Restriction Policies. |
Medium |
|
Computer Software Restriction Policies Default Security Level Changed |
Created when the default security level in the Computer Configuration Software Restriction Policies Security Levels folder is changed. |
Medium |
|
Computer Software Restriction Trusted Publishers Changed |
Created when the Trusted Publisher policy is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Certificate Rule Added |
Created when an Unrestricted level Certificate Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Certificate Rule Changed |
Created when an Unrestricted level Certificate Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Certificate Rule Removed |
Created when an Unrestricted level Certificate Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Hash Rule Added |
Created when an Unrestricted level Hash Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Hash Rule Changed |
Created when an Unrestricted level Hash Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Hash Rule Removed |
Created when an Unrestricted level Hash Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Path Rule Added |
Created when an Unrestricted level Path Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Path Rule Changed |
Created when an Unrestricted level Path Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Path Rule Removed |
Created when an Unrestricted level Path Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Zone Rule Added |
Created when an Unrestricted level Zone Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Zone Rule Changed |
Created when an Unrestricted level Zone Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
Computer Software Restriction Unrestricted Zone Rule Removed |
Created when an Unrestricted level Zone Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
Create a Pagefile Policy Changed |
Created when the Computer policy Create A Pagefile setting is changed in a Group Policy Object. |
Medium |
|
Create a Token Object Policy Changed |
Created when the Computer policy Create A Token Object setting is changed in a Group Policy Object. |
Medium |
|
Create Global Objects Policy Changed |
Created when the Computer policy Create Global Objects setting is changed in a Group Policy Object. |
Medium |
|
Create Permanent Shared Objects Policy Changed |
Created when the Computer policy Create Permanent Shared Objects setting is changed in a Group Policy Object. |
Medium |
|
Create Symbolic Links |
Created when the Create Symbolic Links policy is changed in a Group Policy Object. |
Medium |
|
DCOM: Machine Access Restrictions Policy Defined |
Created when the DCOM: Machine Access Restrictions policy setting is defined on a Group Policy Object. |
Medium |
|
DCOM: Machine Access Restrictions Policy Undefined |
Created when the DCOM: Machine Access Restrictions policy setting is undefined on a Group Policy Object. |
Medium |
|
DCOM: Machine Access Restrictions Security Settings Changed |
Created when the DCOM: Machine Access Restrictions in Security Descriptor Definition (SDDL) Syntax security setting is changed in a Group Policy Object. |
Medium |
|
DCOM: Machine Launch Restrictions Policy Defined |
Created when the DCOM: Machine Launch Restrictions policy setting is defined on a Group Policy Object. |
Medium |
|
DCOM: Machine Launch Restrictions Policy Undefined |
Created when the DCOM: Machine Launch Restrictions policy setting is undefined on a Group Policy Object. |
Medium |
|
DCOM: Machine Launch Restrictions Security Settings Changed |
Created when the DCOM: Machine Launch Restrictions in Security Descriptor Definition (SDDL) Syntax security setting is changed in a Group Policy Object. |
Medium |
|
Debug Programs Policy Changed |
Created when the Computer policy Debug Programs setting is changed in a Group Policy Object. |
Medium |
|
Deny Access to this Computer from the Network Policy Changed |
Created when the Computer policy Deny Access to this Computer from the Network setting is changed in a Group Policy Object. |
Medium |
|
Deny Log On as a Batch Job Policy Changed |
Created when the Computer policy Deny Log On as a Batch Job setting is changed in a Group Policy Object. |
Medium |
|
Deny Log On as a Service Policy Changed |
Created when the Computer policy Deny Log On As A Service setting is changed in a Group Policy Object. |
Medium |
|
Deny Log On Locally Policy Changed |
Created when the Computer policy Deny Log On Locally setting is changed in a Group Policy Object. |
Medium |
|
Deny Log On Through Terminal Services /Remote Desktop Service Policy Changed |
Created when the Computer policy Deny Log On Through Terminal Services setting is changed in a Group Policy Object. |
Medium |
|
Detailed Tracking: Audit DPAPI Activity Changed |
Created when the Detailed Tracking: Audit DPAPI Activity policy setting is changed in a Group Policy Object. |
Medium |
|
Detailed Tracking: Audit Process Creation Changed |
Created when the Detailed Tracking: Audit Process Creation policy setting is changed in a Group Policy Object. |
Medium |
|
Detailed Tracking: Audit Process Termination Changed |
Created when the Detailed Tracking: Audit Process Termination policy setting is changed in a Group Policy Object. |
Medium |
|
Detailed Tracking: Audit RPC Events Changed |
Created when the Detailed Tracking: Audit RPC Events policy setting is changed in a Group Policy Object. |
Medium |
|
Devices: Allow Undock Without Having to Logon Policy Changed |
Created when the Devices: Allow Undock Without Having To Logon setting is changed in a Group Policy Object. |
Medium |
|
Devices: Allowed to Format and Eject Removable Media Policy Changed |
Created when the Devices: Allowed To Format And Eject Removable Media setting is changed in a Group Policy Object. |
Medium |
|
Devices: Prevent Users from Installing Printer Drivers Policy Changed |
Created when the Devices: Prevent Users From Installing Printer Drivers setting is changed in a Group Policy Object. |
Medium |
|
Devices: Restrict CD-ROM Access to Locally Logged-On User Only Policy Changed |
Created when the Devices: Restrict CD-ROM Access To Locally Logged-On User Only setting is changed in a Group Policy Object. |
Medium |
|
Devices: Restrict Floppy Access to Locally Logged-On User Only Policy Changed |
Created when the Devices: Restrict Floppy Access To Locally Logged-On User Only setting is changed in a Group Policy Object. |
Medium |
|
Devices: Unsigned Driver Installation Behavior Policy Changed |
Created when the Devices: Unsigned Driver Installation Behavior setting is changed in a Group Policy Object. |
Medium |
|
Domain Controller: Allow Server Operators to Schedule Tasks Policy Changed |
Created when the Domain controllers: Allow Server Operators To Schedule Tasks setting is changed in a Group Policy Object. |
Medium |
|
Domain Controller: LDAP Server Signing Requirements Policy Changed |
Created when the Domain controllers: LDAP Server Signing Requirements setting is changed in a Group Policy Object. |
Medium |
|
Domain Controller: Refuse Machine Account Password Changes Policy Changed |
Created when the Domain controllers: Refuse Machine Account Password Changes setting is changed in a Group Policy Object. |
Medium |
|
Domain Member: Digitally Encrypt or Sign Secure Channel Data (Always) Policy Changed |
Created when the Domain Member: Digitally Encrypt Or Sign Secure Channel Data (Always) setting is changed in a Group Policy Object. |
Medium |
|
Domain Member: Digitally Encrypt Secure Channel Data (When Possible) Policy Changed |
Created when the Domain Member: Digitally Encrypt Secure Channel Data (When Possible) setting is changed in a Group Policy Object. |
Medium |
|
Domain Member: Digitally Sign Secure Channel Data (When Possible) Policy Changed |
Created when the Domain Member: Digitally Sign Secure Channel Data (When Possible) setting is changed in a Group Policy Object. |
Medium |
|
Domain Member: Disable Machine Account Password Changes Policy Changed |
Created when the Domain Member: Disable Machine Account Password Changes setting is changed in a Group Policy Object. |
Medium |
|
Domain Member: Maximum Machine Account Password Age Policy Changed |
Created when the Domain Member: Maximum Machine Account Password Age setting is changed in a Group Policy Object. |
Medium |
|
Domain Member: Require Strong (Windows 2000 or Later) Session Key Policy Changed |
Created when the Domain Member: Require Strong (Windows 2000 Or Later) Session Key setting is changed in a Group Policy Object. |
Medium |
|
DS Access: Audit Detailed Directory Service Replication Changed |
Created when the DS Access: Audit Detailed Directory Service Replication policy setting is changed in a Group Policy Object. |
Medium |
|
DS Access: Audit Directory Service Access Changed |
Created when the DS Access: Audit Directory Service Access policy setting is changed in a Group Policy Object. |
Medium |
|
DS Access: Audit Directory Service Changes Changed |
Created when the DS Access: Audit Directory Service Changes policy setting is changed in a Group Policy Object. |
Medium |
|
DS Access: Audit Directory Service Replication Changed |
Created when the DS Access: Audit Directory Service Replication policy setting is changed in a Group Policy Object. |
Medium |
|
Enable Computer and User Accounts to be Trusted for Delegation Changed |
Created when the Computer policy Enable Computer And User Accounts To Be Trusted For Delegation Policy setting is changed in a Group Policy Object. |
Medium |
|
Enforce Password History Policy Changed |
Created when the Computer policy Enforce Password History setting is changed in a Group Policy Object. |
Medium |
|
Enforce User Logon Restrictions Policy Changed |
Created when the Computer policy Enforce User Logon Restrictions setting is changed in a Group Policy Object. |
Medium |
|
File or Folder Added to File System Policy |
Created when a registry key is added to the File System policy. |
Medium |
|
File or Folder Changed in File System Policy |
Created when a file or folder is changed in the File System policy. |
Medium |
|
File or Folder Removed from File System Policy |
Created when a file or folder is removed from the File System policy. |
Medium |
|
Force Shutdown from a Remote System Policy Changed |
Created when the Computer policy Force Shutdown From A Remote System setting is changed in a Group Policy Object. |
Medium |
|
Generate Security Audits Policy Changed |
Created when the Computer policy Generate Security Audits setting is changed in a Group Policy Object. |
Medium |
|
Global Object Access Auditing: File System Changed |
Created when the Global Object Auditing: File System security policy is changed. |
Medium |
|
Global Object Access Auditing: Registry Changed |
Create when the Global Object Auditing: Registry security policy is changed. |
Medium |
|
Group Added To Restricted Group Policy |
Created when a group is added to the Restricted Group policy in a Group Policy Object. |
Medium |
|
Group Removed from Restricted Group Policy |
Created when a group is removed from the Restricted Group policy in a Group Policy Object. |
Medium |
|
Impersonate a Client after Authentication Policy Changed |
Created when the Computer policy Impersonate A Client After Authentication setting is changed in a Group Policy Object. |
Medium |
|
Increase a Process Working Set |
Created when the Increase a Process Working Set policy is change in a Group Policy Object. |
Medium |
|
Increase Scheduling Priority Policy Changed |
Created when the Computer policy Increase Scheduling Priority setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Display User Information When the Session is Locked Policy Changed |
Created when the Interactive Logon: Display User Information When the Session is Locked setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Do Not Display Last User Name Policy Changed |
Created when the Interactive Logon: Do Not Display Last User Name setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Do Not Require CTRL+ALT+DEL Policy Changed |
Created when the Interactive Logon: Do Not Require CTRL+ALT+DEL setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Message Text for Users Attempting to Log On Policy Changed |
Created when the Interactive Logon: Message Text For Users Attempting To Log On setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Message Title for Users Attempting to Log On Policy Changed |
Created when the Interactive Logon: Message Title For Users Attempting To Log On setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Number Of Previous Logons To Cache (In Case Domain Controller is Not Available) Policy Changed |
Created when the Interactive Logon: Number Of Previous Logons To Cache setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Prompt User to Change Password Before Expiration Policy Changed |
Created when the Interactive Logon: Prompt User To Change Password Before Expiration setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Require Domain Controller Authentication to Unlock Workstation Policy Changed |
Created when the Interactive Logon: Require Domain controller Authentication to Unlock Workstation setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Require Smart Card Policy Changed |
Created when the Interactive Logon: Require Smart Card setting is changed in a Group Policy Object. |
Medium |
|
Interactive Logon: Smart Card Removal Behavior Policy Changed |
Created when the Interactive Logon: Smart Card Removal Behavior setting is changed in a Group Policy Object. |
Medium |
|
Intermediate Certificate Authorities Added |
Created when an Intermediate Certification Authorities (CA) certificate is added to a Group Policy Object. |
Medium |
|
Intermediate Certificate Authorities Changed |
Created when the Intermediate Certification Authorities certificate is changed on a Group Policy Object. |
Medium |
|
Intermediate Certificate Authorities Removed |
Created when an Intermediate Certification Authorities (CA) certificate is removed from a Group Policy Object. |
Medium |
|
IP Security Policy Assigned |
Created when an IP Security Policy is assigned in the Computer Configuration Group Policy. |
Medium |
|
IP Security Policy Un-assigned |
Created when an IP Security Policy is un-assigned in the Computer Configuration Group Policy. |
Medium |
|
Load and Unload Device Drivers Policy Changed |
Created when the Computer policy Load And Unload Device Drivers setting is changed in a Group Policy Object. |
Medium |
|
Lock Pages in Memory Policy Changed |
Created when the Computer policy Lock Pages In Memory setting is changed in a Group Policy Object. |
Medium |
|
Log On as a Batch Job Policy Changed |
Created when the Computer policy Log On As A Batch Job setting is changed in a Group Policy Object. |
Medium |
|
Log On as a Service Policy Changed |
Created when the Computer policy Log On As A Service setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit Account Lockout Changed |
Created when the Logon/Logoff: Audit Account Lockout policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit IPsec Extended Mode Changed |
Created when the Logon/Logoff: Audit IPsec Extended Mode policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit IPsec Main Mode Changed |
Created when the Logon/Logoff: Audit IPsec Main Mode policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit IPsec Quick Mode Changed |
Created when the Logon/Logoff: Audit IPsec Quick Mode policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit Logoff Changed |
Created when the Logon/Logoff: Audit Logoff policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit Logon Changed |
Created when the Logon/Logoff: Audit Logon policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit Network Policy Server Changed |
Created when the Logon/Logoff: Audit Network Policy Server policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit Other Logon/Logoff Events Changed |
Created when the Logon/Logoff: Audit Other Logon/Logoff Events policy setting is changed in a Group Policy Object. |
Medium |
|
Logon/Logoff: Audit Special Logon Changed |
Created when the Logon/Logoff: Audit Special Logon policy setting is changed in a Group Policy Object. |
Medium |
|
Manage Auditing and Security Log Policy Changed |
Created when the Manage Auditing And Security Log setting is changed in a Group Policy Object. |
Medium |
|
Maximum Application Log Size Policy Changed |
Created when the Maximum Application Log Size setting is changed in a Group Policy Object. |
Medium |
|
Maximum Lifetime for Service Ticket Policy Changed |
Created when the Computer policy Maximum Lifetime for Service Ticket setting is changed in a Group Policy Object. |
Medium |
|
Maximum Lifetime for User Ticket Policy Changed |
Created when the Computer policy Maximum Lifetime for User Ticket setting is changed in a Group Policy Object. |
Medium |
|
Maximum Lifetime for User Ticket Renewal Policy Changed |
Created when the Computer policy Maximum Lifetime for User Ticket Renewal setting is changed in a Group Policy Object. |
Medium |
|
Maximum Password Age Policy Changed |
Created when the Computer policy Maximum Password Age setting is changed in a Group Policy Object. |
Medium |
|
Maximum Security Log Size Policy Changed |
Created when the Maximum Security Log Size setting is changed in a Group Policy Object. |
Medium |
|
Maximum System Log Size Policy Changed |
Created when the Maximum System Log Size setting is changed in a Group Policy Object. |
Medium |
|
Maximum Tolerance for Computer Clock Synchronization Policy Changed |
Created when the Computer policy Maximum Tolerance for Computer Clock Synchronization setting is changed in a Group Policy Object. |
Medium |
|
Member Added to Group in the Restricted Group Policy |
Created when a member is added to a group in the Restricted Group policy of a Group Policy Object. |
Medium |
|
Member Removed from Group in the Restricted Group Policy |
Created when a member is removed from a group in the Restricted Group policy of a Group Policy Object. |
Medium |
|
Membership Added to Group in the Restricted Group Policy |
Created when a membership is added to a group in the Restricted Group policy of a Group Policy Object. |
Medium |
|
Membership Removed from Group in the Restricted Group Policy |
Created when a membership is removed from a group in the Restricted Group policy of a Group Policy Object. |
Medium |
|
Microsoft Network Client: Digitally Sign Communications (Always) Policy Changed |
Created when the Microsoft® Network Client: Digitally Sign Communications (Always) setting is changed in a Group Policy Object. |
Medium |
|
Microsoft Network Client: Digitally Sign Communications (If Server Agrees) Policy Changed |
Created when the Microsoft Network Client: Digitally Sign Communications (If Server Agrees) setting is changed in a Group Policy Object. |
Medium |
|
Microsoft Network Client: Send Unencrypted Password to Connect to Third-Party SMB Servers Policy Changed |
Created when the Microsoft Network Client: Send Unencrypted Password to Connect to Third-Party SMB Servers setting is changed in a Group Policy Object. |
Medium |
|
Microsoft Network Server: Amount of Idle Time Required Before Suspending Sessions Policy Changed |
Created when the Microsoft Network Server: Amount of Idle Time Required Before Suspending Sessions setting is changed in a Group Policy Object. |
Medium |
|
Microsoft Network Server: Digitally Sign Communications (Always) Policy Changed |
Created when the Microsoft Network Server: Digitally Sign Communications (Always) setting is changed in a Group Policy Object. |
Medium |
|
Microsoft Network Server: Digitally Sign Communications (If Client Agrees) Policy Changed |
Created when the Microsoft Network Server: Digitally Sign Communications (If Client Agrees) setting is changed in a Group Policy Object. |
Medium |
|
Microsoft Network Server: Disconnect Clients When Logon Hours Expire Policy Changed |
Created when the Microsoft Network Server: Disconnect Clients When Logon Hours Expire setting is changed in a Group Policy Object. |
Medium |
|
Microsoft Network Server: Server SPN Target Name Validation Level |
Created when the Microsoft Network Server: Server SPN Target Name Validation Level policy is changed in a Group Policy Object. |
Medium |
|
Minimum Password Age Policy Changed |
Created when the Computer policy Minimum Password Age setting is changed in a Group Policy Object. |
Medium |
|
Minimum Password Length Policy Changed |
Created when the Computer policy Minimum Password Length setting is changed in a Group Policy Object. |
Medium |
|
Modify an Object Label |
Created when the Modify an Object Label policy is changed in a Group Policy Object. |
Medium |
|
Modify Firmware Environment Policy Changed |
Created when the Modify Firmware Environment setting is changed in a Group Policy Object. |
Medium |
|
NAP Client Health Registration Settings: CSP Changed |
Created when the Cryptographic Service Provider (CSP) is changed in a NAP client request policy. |
Medium |
|
NAP Client Health Registration Settings: CSP Key Length Changed |
Created when the CSP asymmetric key length is changed in a NAP client request policy. |
Medium |
|
NAP Client Health Registration Settings: Hash Algorithm Changed |
Created when the hash algorithm is changed in a NAP client request policy. |
Medium |
|
NAP Client Health Registration Settings: Require Server Verification Changed |
Created when the server verification (HTTP) setting is enabled or disabled in a NAP client configuration. |
Medium |
|
NAP Client Health Registration Settings: Trusted Server Group Added |
Created when a new trusted server group is created in a NAP client configuration. |
Medium |
|
NAP Client Health Registration Settings: Trusted Server Group Removed |
Created when a trusted server group is removed from a NAP client configuration. |
Medium |
|
NAP Client Health Registration Settings: Trusted Server URL Added |
Created when a new URL for a HRA server is added to the trusted server group in a NAP client configuration. |
Medium |
|
NAP Client Health Registration Settings: Trusted Server URL Changed |
Created when an existing URL for a HRA server is modified in a NAP client configuration. |
Medium |
|
NAP Client Health Registration Settings: Trusted Server URL Removed |
Created when a URL for a HRA server is removed from the trusted server group in a NAP client configuration. |
Medium |
|
NAP User Interface Description Changed |
Created when the description field on the NAP Status User Interface properties dialog is changed for an NAP client configuration. |
Medium |
|
NAP User Interface Image File Changed |
Created when the image file is changed on the NAP Status User Interface properties dialog for an NAP client configuration. |
Medium |
|
NAP User Interface Image File Name Changed |
Created when the image file name is changed on the NAP Status User Interface properties dialog for an NAP client configuration. |
Medium |
|
NAP User Interface Title Changed |
Created when the title field on the NAP Status User Interface properties dialog is changed for an NAP client configuration. |
Medium |
|
NAP: DHCP Quarantine Enforcement Client Changed |
Created when the DHCP Quarantine Enforcement Client setting is enabled or disabled for an NAP client configuration. |
Medium |
|
NAP: EAP Quarantine Enforcement Client Changed |
Created when the EAP Quarantine Enforcement Client setting is enabled or disabled for an NAP client configuration. |
Medium |
|
NAP: IPsec Relying Party Changed |
Create when the IPsec Relying Party setting is enabled or disabled for an NAP client configuration. |
Medium |
|
NAP: RD Gateway Quarantine Enforcement Client Changed |
Created when the RD Gateway Quarantine Enforcement Client setting is enabled or disabled for an NAP client configuration. |
Medium |
|
NAP: Remote Access Enforcement Client for Windows XP and Windows Vista Changed |
Created when the Remote Access Enforcement Client for Windows XP and Windows Vista setting is enabled or disabled for an NAP client configuration. |
Medium |
|
NAP: Wireless EAPOL Enforcement Client for Windows XP Changed |
Created when the Wireless EAPOL Enforcement Client for Windows XP setting is enabled or disabled for an NAP client configuration. |
Medium |
|
Network Access: Allow Anonymous SID/Name Translation Policy Changed |
Created when the Network Access: Allow Anonymous SID/Name Translation setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Do Not Allow Anonymous Enumeration of SAM Accounts And Shares Policy Changed |
Created when the Network Access: Do Not Allow Anonymous Enumeration Of SAM Accounts and Shares setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Do Not Allow Anonymous Enumeration of SAM Accounts Policy Changed |
Created when the Network Access: Do Not Allow Anonymous Enumeration Of SAM Accounts setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Do Not Allow Storage of Credentials or .NET Passports for Network Authentication Policy Changed |
Created when the Network Access: Do Not Allow Storage of Credentials or .NET Passports for Network Authentication setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Let Everyone Permissions Apply to Anonymous Users Policy Changed |
Created when the Network Access: Let Everyone Permissions Apply to Anonymous Users setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Named Pipes that can be Accessed Anonymously Policy Changed |
Created when the Network Access: Named Pipes that can be Accessed Anonymously setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Remotely Accessible Registry Paths and Sub-Paths Changed |
Created when the Network Access: Remotely Accessible Registry Paths And Sub-Paths setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Remotely Accessible Registry Paths Policy Changed |
Created when the Network Access: Remotely Accessible Registry Paths setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Restrict Anonymous Access to Named Pipes and Shares Policy Changed |
Created when the Network Access: Restrict Anonymous Access To Named Pipes and Shares setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Shares that can be Accessed Anonymously Policy Changed |
Created when the Network Access: Shares that can be Accessed Anonymously setting is changed in a Group Policy Object. |
Medium |
|
Network Access: Sharing and Security Model for Local Accounts Changed |
Created when the Network Access: Sharing and Security Model for Local Accounts setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Allow Local System to Use Computer Identity for NTLM |
Created when the Network Security: Allow Local System to Use Computer Identity for NTLM setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Allow LocalSystem NULL Session Fallback |
Created when the Network Security: Allow LocalSystem NULL Session Fallback setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Allow PKU2U Authentication Requests to this Computer to use Online Identities |
Created when the Network Security: Allow PKU2U Authentication Requests to this Computer to use Online Identities setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Configure Encryption Types Allowed for Kerberos |
Created when the Network Security: Configure Encryption Types Allowed for Kerberos setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Do Not Store LAN Manager Hash Value on Next Password Change Policy Changed |
Created when the Network Security: Do Not Store LAN Manager Hash Value on Next Password Change setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Force Logoff When Logon Hours Expire Policy Changed |
Created when the Network Security: Force Logoff When Logon Hours Expire setting is changed in a Group Policy Object. |
Medium |
|
Network Security: LAN Manager Authentication Level Policy Changed |
Created when the Network Security: LAN Manager Authentication Level setting is changed in a Group Policy Object. |
Medium |
|
Network Security: LDAP Client Signing Requirements Policy Changed |
Created when the Network Security: LDAP Client Signing Requirements setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Clients Policy Changed |
Created when the Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Clients setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Servers Policy Changed |
Created when the Network Security: Minimum Session Security for NTLM SSP Based (Including Secure RPC) Servers setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Restrict NTLM: Add Remote Server Exceptions for NTLM Authentication |
Created when the Network Security: Restrict NTLM: Add Remote Server Exceptions for NTLM Authentication policy setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Restrict NTLM: Add Server Exceptions in This Domain |
Created when the Network Security: Restrict NTLM: Add Server Exceptions in This Domain policy setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Restrict NTLM: Audit Incoming NTLM Traffic |
Created when the Network Security: Restrict NTLM: Audit Incoming NTLM Traffic policy setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Restrict NTLM: Audit NTLM Authentication in This Domain |
Created when the Network Security: Restrict NTLM: Audit NTLM Authentication in This Domain policy setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Restrict NTLM: Incoming NTLM Traffic |
Created when the Network Security: Restrict NTLM: Incoming NTLM Traffic policy setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Restrict NTLM: NTLM Authentication in This Domain |
Created when the Network Security: Restrict NTLM: NTLM Authentication in This Domain policy setting is changed in a Group Policy Object. |
Medium |
|
Network Security: Restrict NTLM: Outgoing NTLM Traffic to Remote Servers |
Created when the Network Security: Restrict NTLM: Outgoing NTLM Traffic to Remote Servers policy setting is changed in a Group Policy Object. |
Medium |
|
NLM: Location Type Added |
Created when an NLM: Location Type is added to a Group Policy Object. |
Medium |
|
NLM: Location Type Changed |
Created when an NLM: Location Type is changed in a Group Policy Object. |
Medium |
|
NLM: Location Type Permissions Added |
Created when an NLM: Location Type Permission is added to a Group Policy Object. |
Medium |
|
NLM: Location Type Permissions Changed |
Created when an NLM: Location Type Permission is changed in a Group Policy Object. |
Medium |
|
NLM: Location Type Permissions Removed |
Created when an NLM: Location Type Permission is removed from a Group Policy Object. |
Medium |
|
NLM: Location Type Removed |
Created when an NLM: Location Type is removed from a Group Policy Object. |
Medium |
|
NLM: Network Icon Added |
Created when an NLM: Network Icon is added to a Group Policy Object. |
Medium |
|
NLM: Network Icon Changed |
Created when an NLM: Network Icon is changed in a Group Policy Object. |
Medium |
|
NLM: Network Icon Permissions Added |
Created when an NLM: Network Icon Permission is added to a Group Policy Object. |
Medium |
|
NLM: Network Icon Permissions Changed |
Created when an NLM: Network Icon Permission is changed in a Group Policy Object. |
Medium |
|
NLM: Network Icon Permissions Removed |
Created when an NLM: Network Icon Permission is removed from a Group Policy Object. |
Medium |
|
NLM: Network Icon Removed |
Created when an NLM: Network Icon is removed from a Group Policy Object. |
Medium |
|
NLM: Network Name Added |
Created when an NLM: Network Name is added to a Group Policy Object. |
Medium |
|
NLM: Network Name Changed |
Created when an NLM: Network Name is changed in a Group Policy Object. |
Medium |
|
NLM: Network Name Permissions Added |
Created when an NLM: Network Name Permission is added to a Group Policy Object. |
Medium |
|
NLM: Network Name Permissions Changed |
Created when an NLM: Network Name Permission is changed in a Group Policy Object. |
Medium |
|
NLM: Network Name Permissions Removed |
Created when an NLM: Network Name Permission is removed from a Group Policy Object. |
Medium |
|
NLM: Network Name Removed |
Created when an NLM: Network Name is removed from a Group Policy Object. |
Medium |
|
Object Access: Audit Application Generated Changed |
Created when the Object Access: Audit Application Generated policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit Certification Services Changed |
Created when the Object Access: Audit Certification Services policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit File Share Changed |
Created when the Object Access: Audit File Share policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit File System Changed |
Created when the Object Access: Audit File System policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit Filtering Platform Connection Changed |
Created when the Object Access: Audit Filtering Platform Connection policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit Filtering Platform Packet Drop Changed |
Created when the Object Access: Audit Filtering Platform Packet Drop policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit Handle Manipulation Changed |
Created when the Object Access: Audit Handle Manipulation policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit Kernel Object Changed |
Created when the Object Access: Audit Kernel Object policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit Other Object Access Events Changed |
Created when the Object Access: Audit Other Object Access Events policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit Registry Changed |
Created when the Object Access: Audit Registry policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Audit SAM Changed |
Created when the Object Access: Audit SAM policy setting is changed in a Group Policy Object. |
Medium |
|
Object Access: Detailed File Share Changed |
Created when the Object Access: Audit Detailed File Share policy setting is changed in a Group Policy Object. |
Medium |
|
Password Must Meet Complexity Requirements Policy Changed |
Created when the Computer policy Password Must Meet Complexity Requirements setting is changed in a Group Policy Object. |
Medium |
|
Perform Volume Maintenance Tasks Policy Changed |
Created when the Perform Volume Maintenance Tasks setting is changed in a Group Policy Object. |
Medium |
|
Permissions Changed on a System Services Policy |
Created when permissions change in a System Services Policy in a Group Policy Object. |
Medium |
|
Policy Change: Audit Audit Policy Change Changed |
Created when the Policy Change: Audit Audit Policy Change security setting is changed in a Group Policy Object. |
Medium |
|
Policy Change: Audit Authentication Policy Change Changed |
Created when the Policy Change: Audit Authentication Policy Change security setting is changed in a Group Policy Object. |
Medium |
|
Policy Change: Audit Authorization Policy Change Changed |
Created when the Policy Change: Audit Authorization Policy Change security setting is changed in a Group Policy Object. |
Medium |
|
Policy Change: Audit Filtering Platform Policy Change Changed |
Created when the Policy Change: Audit Filtering Platform Policy Change security setting is changed in a Group Policy Object. |
Medium |
|
Policy Change: Audit MPSSVC Rule-Level Policy Change Changed |
Created when the Policy Change: Audit MPSSVC Rule-Level Policy Change security setting is changed in a Group Policy Object. |
Medium |
|
Policy Change: Audit Other Policy Change Events Changed |
Created when the Policy Change: Audit Other Policy Change Events security setting is changed in a Group Policy Object. |
Medium |
|
Prevent Local Guests Group from Accessing Application Log Policy Change |
Created when the Prevent Local Guests Group from Accessing Application Log setting is changed in a Group Policy Object. |
Medium |
|
Prevent Local Guests Group from Accessing Security Log Policy Changed |
Created when the Prevent Local Guests Group from Accessing Security Log setting is changed in a Group Policy Object. |
Medium |
|
Prevent Local Guests Group From Accessing System Log Policy Changed |
Created when the Prevent Local Guests Group From Accessing System Log setting is changed in a Group Policy Object. |
Medium |
|
Privilege Use: Audit Non Sensitive Privilege Use Changed |
Created when the Privilege Use: Audit Non Sensitive Privilege Use security setting is changed in a Group Policy Object. |
Medium |
|
Privilege Use: Audit Other Privilege Use Events Changed |
Created when the Privilege Use: Audit Other Privilege Use Events security setting is changed in a Group Policy Object. |
Medium |
|
Privilege Use: Audit Sensitive Privilege Use Changed |
Created when the Privilege Use: Audit Sensitive Privilege Use security setting is changed in a Group Policy Object. |
Medium |
|
Profile Single Process Policy Changed |
Created when the Profile Single Process setting is changed in a Group Policy Object. |
Medium |
|
Profile System Performance Policy Changed |
Created when the Profile System Performance setting is changed in a Group Policy Object. |
Medium |
|
QoS Policy: Application Name Changed |
Created when the application name specified in a QoS policy is changed. |
Medium |
|
QoS Policy: DSCP Value Changed |
Created when the DSCP value specified in a QoS policy is changed. |
Medium |
|
QoS Policy: Local IP Changed |
Created when the source IP address specified in a QoS policy is changed. |
Medium |
|
QoS Policy: Local IP Prefix Length Changed |
Created when the prefix length of the source IP address specified in a QoS policy is changed. |
Medium |
|
QoS Policy: Local Port Changed |
Created when the source port specified in a Qos policy is changed. |
Medium |
|
QoS Policy: Protocol Changed |
Created when the protocol to which a QoS policy applies is changed. |
Medium |
|
QoS Policy: Remote IP Changed |
Created when the destination IP address specified in a QoS policy is changed. |
Medium |
|
QoS Policy: Remote IP Prefix Length Changed |
Created when the prefix length of the destination IP address specified in a QoS policy is changed. |
Medium |
|
QoS Policy: Remote Port Changed |
Created when the destination port specified in a QoS policy is changed. |
Medium |
|
QoS Policy: Throttle Rate Changed |
Created when the traffic throttle rate setting or value is modified in a QoS policy. |
Medium |
|
QoS Policy: URL Changed |
Created when HTTP or HTTPS URL specified in a QoS policy is changed. |
Medium |
|
QoS Policy: URL Recursive Changed |
Created when the Include subdirectories and files option is enabled or disabled for a QoS policy. |
Medium |
|
QoS Policy: Version Changed |
Created when the version specified in a QoS policy is changed. |
Medium |
|
Recovery Console: Allow Automatic Administrative Logon Policy Changed |
Created when the Recovery Console: Allow Automatic Administrative Logon setting is changed in a Group Policy Object. |
Medium |
|
Recovery Console: Allow Floppy Copy And Access Policy Changed |
Created when the Recovery Console: Allow Floppy Copy And Access To All Drives And All Folders setting is changed in a Group Policy Object. |
Medium |
|
Registry Key Added to Registry Policy |
Created when a registry key is added to the Registry policy. |
Medium |
|
Registry Key Changed in Registry Policy |
Created when a registry key is changed in the Registry policy. |
Medium |
|
Registry Key Removed from Registry Policy |
Created when a registry key is removed from the Registry policy. |
Medium |
|
Remove Computer from Docking Station Policy Changed |
Created when the Remove Computer From Docking Station setting is changed in a Group Policy Object. |
Medium |
|
Replace a Process Level Token Policy Changed |
Created when the Replace a Process Level Token setting is changed in a Group Policy Object. |
Medium |
|
Reset Account Lockout Counter After Change Policy Changed |
Created when the Computer policy Reset Account Lockout Counter After Change setting is changed in a Group Policy Object. |
Medium |
|
Restore Files and Directories Policy Changed |
Created when the Restore Files and Directories setting is changed in a Group Policy Object. |
Medium |
|
Retain Application Log Policy Changed |
Created when the Retain Application Log setting is changed in a Group Policy Object. |
Medium |
|
Retain Security Log Policy Changed |
Created when the Retain Security Log setting is changed in a Group Policy Object. |
Medium |
|
Retain System Log Policy Changed |
Created when the Retain System Log setting is changed in a Group Policy Object. |
Medium |
|
Retention Method for Application Log Policy Changed |
Created when the Retention Method For Application Log setting is changed in a Group Policy Object. |
Medium |
|
Retention Method for Security Log Policy Changed |
Created when the Retention Method For Security Log setting is changed in a Group Policy Object. |
Medium |
|
Retention Method for System Log Policy Changed |
Created when the Retention Method For System Log setting is changed in a Group Policy Object. |
Medium |
|
Secure System Partition (For RISC Platforms only) Policy Changed |
Created when the Secure System Partition (For RISC Platforms Only) setting is changed in a Group Policy Object. |
Medium |
|
Service Defined in System Services Policy |
Created when a service is marked as defined in the System Services policy. |
Medium |
|
Service Startup Changed in System Services Policy |
Created when a service startup is marked as changed in the System Services policy. |
Medium |
|
Service Undefined in System Services Policy |
Created when a service is undefined from the System Services policy. |
Medium |
|
Shut Down the Computer When the Security Audit Log is Full Policy Changed |
Created when the Shut Down the Computer When the Security Audit Log is Full setting is changed in a Group Policy Object. |
Medium |
|
Shut Down the System Policy Changed |
Created when the Shut Down the System setting is changed in a Group Policy Object. |
Medium |
|
Shutdown: Allow System to be Shut Down Without Having to Log On Policy Changed |
Created when the Allow System to be Shut Down Without Having to Log On setting is changed in a Group Policy Object. |
Medium |
|
Shutdown: Clear Virtual Memory Pagefile Policy Changed |
Created when the Clear Virtual Memory Pagefile When System Shuts Down setting is changed in a Group Policy Object. |
Medium |
|
Starter GPO Computer Setting Changed |
Created when a Computer Configuration policy setting is changed for a Starter GPO. |
Medium |
|
Starter GPO User Setting Changed |
Created when a User Configuration policy setting is changed for a Starter GPO. |
Medium |
|
Store Passwords Using Reversible Encryption Policy Changed |
Created when the Computer policy Store Passwords Using Reversible Encryption setting is changed in a Group Policy Object. |
Medium |
|
Synchronize Directory Service Data Policy Changed |
Created when the Synchronize Directory Service Data setting is changed in a Group Policy Object. |
Medium |
|
System Cryptography: Force Strong Key Protection for User Keys Stored on the Computer Policy Changed |
Created when the System Cryptography: Force Strong Key Protection For User Keys Stored On The Computer setting is changed in a Group Policy Object. |
Medium |
|
System Cryptography: Use FIPS Compliant Algorithms for Encryption, Hashing, and Signing Policy Changed |
Created when the System Cryptography: Use FIPS Compliant Algorithms For Encryption, Hashing, and Signing setting is changed in a Group Policy Object. |
Medium |
|
System Objects: Default Owner for Objects Created by Members of the Administrators Group Policy Changed |
Created when the System Objects: Default Owner For Objects Created By Members Of The Administrators Group setting is changed in a Group Policy Object. |
Medium |
|
System Objects: Require Case Insensitivity for Non-Windows Subsystems Policy Changed |
Created when the System Objects: Require Case Insensitivity For Non-Windows Subsystems setting is changed in a Group Policy Object. |
Medium |
|
System Objects: Strengthen Default Permissions of Global System Objects (e.g. Symbolic Links) Policy Changed |
Created when the System Objects: Strengthen Default Permissions Of Global System Objects setting is changed in a Group Policy Object. |
Medium |
|
System Objects: Strengthen Default Permissions of Internal System Objects (e.g. Symbolic Links) Policy Changed |
Created when the System Objects: Strengthen Default Permissions Of Internal System Objects setting is changed in a Group Policy Object. |
Medium |
|
System Settings: Optional Subsystems Policy Changed |
Created when the System Settings: Optional Subsystems setting is changed in a Group Policy Object. |
Medium |
|
System Settings: Use Certificate Rules on Windows Executables for Software Restriction Policies Policy Changed |
Created when the System Settings: Use Certificate Rules on Windows Executables for Software Restriction Policies setting is changed in a Group Policy Object. |
Medium |
|
System: Audit IPsec Driver Changed |
Created when the System: Audit IPsec Driver security setting is changed in a Group Policy Object. |
Medium |
|
System: Audit Other System Events Changed |
Created when the System: Audit Other System Events security setting is changed in a Group Policy Object. |
Medium |
|
System: Audit Security State Change Changed |
Created when the System: Audit Security State Change security setting is changed in a Group Policy Object. |
Medium |
|
System: Audit Security System Extension Changed |
Created when the System: Audit Security System Extension security setting is changed in a Group Policy Object. |
Medium |
|
System: Audit System Integrity Changed |
Created when the System: Audit System Integrity security setting is changed in a Group Policy Object. |
Medium |
|
Take Ownership of Files or Other Objects Policy Changed |
Created when the Take Ownership of Files or Other Objects setting is changed in a Group Policy Object. |
Medium |
|
Trusted People Added |
Created when a Trusted People certificate is added to a Group Policy Object. |
Medium |
|
Trusted People Changed |
Created when a Trusted People certificate is changed in a Group Policy Object. |
Medium |
|
Trusted People Removed |
Created when a Trusted People certificate is removed from a Group Policy Object. |
Medium |
|
Unsigned Non-Driver Installation Behavior Policy Changed |
Created when the Unsigned Non-Driver Installation Behavior setting is changed in a Group Policy Object. |
Low |
|
User Account Control: Admin Approval Mode for the Built-in Administrator Account |
Created when the User Account Control: Admin Approval Mode for the Built-in Administration Account policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Allow UIAccess Applications to Prompt for Evaluation Without Using the Secure Desktop |
Created when the User Account Control: Allow UIAccess Applications to Prompt for Evaluation Without Using the Secure Desktop policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Behavior of the Elevation Prompt for Administrators in Admin Approval Mode |
Created when the User Account Control: Behavior of the Elevation Prompt for Administrators in Admin Approval Mode policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Behavior of the Elevation Prompt for Standard Users |
Created when the User Account Control: Behavior of the Elevation Prompt for Standard Users policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Detect Application Installations and Prompt for Elevation |
Created when the User Account Control: Detect Application Installations and Prompt for Elevation policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Only Elevate Executables that are Signed and Validated |
Created when the User Account Control: Only Elevate Executables that are Signed and Validated policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Only Elevate UIAccess Applications that are Installed in Secure Locations |
Created when the User Account Control: Only Elevate UIAccess Applications that are Installed in Secure Locations policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Run All Administrators in Admin Approval Mode |
Created when the User Account Control: Run All Administrators in Admin Approval Mode policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Switch to the Secure Desktop When Prompting for Elevation |
Created when the User Account Control: Switch to the Secure Desktop When Prompting for Elevation policy is changed in a Group Policy Object. |
Medium |
|
User Account Control: Virtualize File and Registry Write Failures to Per-User Locations |
Created when the User Account Control: Virtualize File and Registry Write Failures to Per-User Locations policy is changed in a Group Policy Object. |
Medium |
|
User Administrative Template Setting Changed |
Created when a setting associated with a User Administrative Template is enabled, changed, or disabled. |
Medium |
|
User Application Data Folder Redirection Options Changed |
Created when Settings properties of the Application Data policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Application Data Folder Redirection Target Path Changed |
Created when Target properties of the Application Data policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Contacts Folder Redirection Options Changed |
Created when Settings properties of the Contacts policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Contacts Folder Redirection Target Path Changed |
Created when Target properties of the Contacts policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Credential Roaming Added |
Created when user credential roaming is added to a Group Policy Object. |
Medium |
|
User Credential Roaming Changed |
Created when changes are made to user credential roaming in a Group Policy Object. |
Medium |
|
User Credential Roaming Options Changed |
Created when the user credential roaming options are changed in a Group Policy Object. |
Medium |
|
User Credential Roaming Removed |
Created when user credential roaming is removed from a Group Policy Object. |
Medium |
|
User Desktop Folder Redirection Options Changed |
Created when Settings properties of the Desktop policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Desktop Folder Redirection Target Path Changed |
Created when Target properties of the Desktop policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Downloads Folder Redirection Options Changed |
Created when Settings properties of the Downloads policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Downloads Folder Redirection Target Path Changed |
Created when Target properties of the Downloads policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Favorites Folder Redirection Options Changed |
Created when Settings properties of the Favorites policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Favorites Folder Redirection Target Path Changed |
Created when Target properties of the Favorites policy are changed in the Windows Settings Folder Redirection Policies. |
Medium |
|
User Group Policy Preference Setting Changed |
Created when a user preference in a group policy is enabled, changed, or disabled.
|
Medium |
|
User Group Policy Script setting changed |
Created when a computer startup/shutdown script in a group policy is added, changed, or removed. |
Medium |
|
User Internet Explorer Maintenance Automatic Browser Configuration Auto-config Option Changed |
Created when the Automatic Configuration property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer® Maintenance Connections policies. |
Medium |
|
User Internet Explorer Maintenance Automatic Browser Configuration Auto-config Time Changed |
Created when the Automatically Configure Every xx Minutes property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Internet Explorer Maintenance Automatic Browser Configuration Auto-config URL Changed |
Created when the Auto-config URL property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies. |
Medium |
|
User Internet Explorer Maintenance Automatic Browser Configuration Auto-detect Option Changed |
Created when the Automatic Detect property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies. |
Medium |
|
User Internet Explorer Maintenance Automatic Browser Auto-proxy URL Changed |
Created when the Auto-proxy URL property of the Automatic Browser Configuration policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies. |
Medium |
|
User Internet Explorer Maintenance Browser Title Changed |
Created when the User Internet Explorer Maintenance Browser Title setting is changed. |
Medium |
|
User Internet Explorer Maintenance Connection Delete Existing Option Changed |
Created when the Remove Old Dial-up Connections property of the Connection Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies. |
Medium |
|
User Internet Explorer Maintenance Connections Settings Import Option Changed |
Created when Import Settings property of the Connection Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connections policies. |
Medium |
|
User Internet Explorer Maintenance Content Ratings Option Changed |
Created when the Content Ratings property in the Security Zones and Content Ratings policy is changed in the Windows Settings Internet Explorer Maintenance Security policies. |
Medium |
|
User Internet Explorer Maintenance Enable Trusted Publisher Lockdown Option Changed |
Created when the Enable Trusted Publisher Lockdown property in the Authenticode Settings policy is changed in the Windows Settings Internet Explorer Maintenance Security policies. |
Medium |
|
User Internet Explorer Maintenance Important URLs Home Page URL Changed |
Created when the Customize Home Page property in the Important URLs policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies. |
Medium |
|
User Internet Explorer Maintenance Important URLs Online Support URL Changed |
Created when the group policy setting for User Internet Maintenance Important URLs Help URL is changed. |
Medium |
|
User Internet Explorer Maintenance Important URLs Search Bar URL Changed |
Created when the Customize Search Bar property in the Important URLs policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies. |
Medium |
|
User Internet Explorer Maintenance Large Animated Logo Changed |
Created when the Large Animated Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies. |
Medium |
|
User Internet Explorer Maintenance Large Static Logo Changed |
Created when the Large Static Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies. |
Medium |
|
User Internet Explorer Maintenance Program Settings Option Changed |
Created when the Program Settings policy is changed in the Windows Settings Internet Explorer Maintenance Programs policies. |
Medium |
|
User Internet Explorer Maintenance Proxy Settings Configuration FTP Proxy Changed |
Created when the FTP proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Internet Explorer Maintenance Proxy Settings Configuration Gopher Proxy Changed |
Created when the Gopher proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Internet Explorer Maintenance Proxy Settings Configuration Secure Proxy Changed |
Created when the Secure proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Internet Explorer Maintenance Proxy Settings HTTP Proxy Changed |
Created when the HTTP proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Internet Explorer Maintenance Proxy Settings Proxy Exceptions Changed |
Created when the Exceptions property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Internet Explorer Maintenance Proxy Settings Socks Proxy Changed |
Created when the Socks proxy URL property of the Proxy Settings policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Internet Explorer Maintenance Security Zones and Privacy Customization Option Changed |
Created when the Security Zones and Privacy property in the Security Zones and Content Ratings policy is changed in the Windows Settings Internet Explorer Maintenance Security policies. |
Medium |
|
User Internet Explorer Maintenance Small Animated Logo Changed |
Created when the Small Animated Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies. |
Medium |
|
User Internet Explorer Maintenance Small Static Logo Changed |
Created when the Small Static Logo Bitmap property of the Custom Logo policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies. |
Medium |
|
User Internet Explorer Maintenance Toolbar Background Bitmap Changed |
Created when the Background property of the Browser Toolbar Customizations policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies. |
Medium |
|
User Internet Explorer Maintenance Toolbar Buttons Changed |
Created when the Buttons property of the Browser Toolbar Customizations policy is changed in the Windows Settings Internet Explorer Maintenance Browser User Interface policies. |
Medium |
|
User Internet Explorer Maintenance URLs Browser Favorites List Changed |
Created when the Favorites property in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies. |
Medium |
|
User Internet Explorer Maintenance URLs Browser Links List Changed |
Created when the Links property in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies. |
Medium |
|
User Internet Explorer Maintenance URLs Favorites and Links Delete Existing Channels Option Changed |
Created when the Delete Existing Channels option in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies. |
Medium |
|
User Internet Explorer Maintenance URLs Favorites and Links Delete Existing Favorites Option Changed |
Created when the Delete Existing Favorites and Links option in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies. |
Medium |
|
User Internet Explorer Maintenance URLs Favorites and Links Top of List Option Changed |
Created when the Place Favorites and Links at the Top of the List option in the Favorites and Links policy is changed in the Windows Settings Internet Explorer Maintenance URLs policies. |
Medium |
|
User Internet Explorer Maintenance User Agent String Changed |
Created when the User Agent String policy is changed in the Windows Settings Internet Explorer Maintenance Connection policies. |
Medium |
|
User Links Folder Redirection Options Changed |
Created when Settings properties of the Links policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Links Folder Redirection Target Path Changed |
Created when Target properties of the Links policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Music Folder Redirection Options Changed |
Created when Settings properties of the Music policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Music Folder Redirection Target Path Changed |
Created when Target properties of the Music policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User My Documents Folder My Pictures Preferences Changed |
Created when My Pictures Settings properties of the My Documents policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User My Documents Folder Redirection Options Changed |
Created when Settings (other than My Pictures) properties of the My Documents policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User My Documents Folder Redirection Target Path Changed |
Created when Target properties of the My Documents policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Pictures Folder Redirection Options Changed |
Created when Settings properties of the Pictures policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Pictures Folder Redirection Target Path Changed |
Created when Target properties of the Pictures policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Public Key Policies Autoenrollment Settings Changed |
Created when any properties of Autoenrollment Settings in the User Configuration Public Key Policies Enterprise Trust list is changed. |
Medium |
|
User Public Key Policies Enterprise Trust List Added |
Created when a certificate is imported into the User Configuration Public Key Policies Enterprise Trust. |
Medium |
|
User Public Key Policies Enterprise Trust List Changed |
Created when a certificate in the User Configuration Public Key Policies Enterprise Trust list is changed. |
Medium |
|
User Public Key Policies Enterprise Trust List Removed |
Created when a certificate in the User Configuration Public Key Policies Enterprise Trust list is removed. |
Medium |
|
User Saved Games Folder Redirection Options Changed |
Created when Settings properties of the Saved Games policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Saved Games Folder Redirection Target Path Changed |
Created when Target properties of the Saved Games policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Searches Folder Redirection Options Changed |
Created when Settings properties of the Searches policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Searches Folder Redirection Target Path Changed |
Created when Target properties of the Searches policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Software Installation Policy Added |
Created when a User Software Installation Policy is added to User Configuration in Software Restriction policies. |
Medium |
|
User Software Installation Policy Changed |
Created when a User Software Installation Policy is Changed in the User Configuration in Software Restriction policies. |
Medium |
|
User Software Installation Policy Removed |
Created when a User Software Installation Policy is deleted from the User Configuration in Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Hash Rule Added |
Created when a Basic User Hash Rule is added to User Configuration Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Hash Rule Changed |
Created when a Basic User Hash Rule is changed in User Configuration Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Hash Rule Removed |
Created when a Basic User Hash Rule is removed from User Configuration Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Path Rule Added |
Created when a Basic User Path Rule is added to User Configuration Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Path Rule Changed |
Created when a Basic User Path Rule is changed in User Configuration Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Path Rule Removed |
Created when a Basic User Path Rule is removed in User Configuration Software Restriction. |
Medium |
|
User Software Restriction Basic User Zone Rule Added |
Created when a Basic User Zone Rule is added to User Configuration Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Zone Rule Changed |
Created when a Basic User Zone Rule is changed in User Configuration Software Restriction policies. |
Medium |
|
User Software Restriction Basic User Zone Rule Removed |
Created when a Basic User Zone Rule is removed in User Configuration Software Restriction. |
Medium |
|
User Software Restriction Designated File Types Changed |
Created when the Designated File Types policy is changed in the Software Restriction Policies. |
Medium |
|
User Software Restriction Disallowed Certificate Rule Added |
Created when a Disallowed level Certificate Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Certificate Rule Changed |
Created when a Disallowed level Certificate Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Certificate Rule Removed |
Created when a Disallowed level Certificate Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Hash Rule Added |
Created when a Disallowed level Hash Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Hash Rule Changed |
Created when a Disallowed level Hash Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Hash Rule Removed |
Created when a Disallowed level Hash Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Path Rule Added |
Created when a Disallowed level Path Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Path Rule Changed |
Created when a Disallowed level Path Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Path Rule Removed |
Created when a Disallowed level Path Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Zone Rule Added |
Created when a Disallowed level Zone Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Zone Rule Changed |
Created when a Disallowed level Zone Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Disallowed Zone Rule Removed |
Created when a Disallowed level Zone Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Enforcement Files Changed |
Created when an Enforcement Policy Applicable Files option is changed in the Software Restriction policies. |
Medium |
|
User Software Restriction Enforcement Users Changed |
Created when an Enforcement Policy Applicable Users option is changed in the Software Restriction policies. |
Medium |
|
User Software Restriction Policies Default Security Level Changed |
Created when the default security level in the User Configuration Software Restriction Policies Security Levels folder is changed. |
Medium |
|
User Software Restriction Trusted Publishers Changed |
Created when the Trusted Publishers policy is changed in the Software Restriction policies. |
Medium |
|
User Software Restriction Unrestricted Certificate Rule Added |
Created when an Unrestricted level Certificate Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Certificate Rule Changed |
Created when an Unrestricted level Certificate Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Certificate Rule Removed |
Created when an Unrestricted level Certificate Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Hash Rule Added |
Created when an Unrestricted level Hash Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Hash Rule Changed |
Created when an Unrestricted level Hash Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Hash Rule Removed |
Created when an Unrestricted level Hash Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Path Rule Added |
Created when an Unrestricted level Path Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Path Rule Changed |
Created when an Unrestricted level Path Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Path Rule Removed |
Created when an Unrestricted level Path Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Zone Rule Added |
Created when an Unrestricted level Zone Rule is added to the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Zone Rule Changed |
Created when an Unrestricted level Zone Rule is changed in the Software Restriction Policies Additional Rules. |
Medium |
|
User Software Restriction Unrestricted Zone Rule Removed |
Created when an Unrestricted level Zone Rule is removed from the Software Restriction Policies Additional Rules. |
Medium |
|
User Start Menu Folder Redirection Options Changed |
Created when Settings properties of the Start Menu policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Start Menu Folder Redirection Target Path Changed |
Created when Target properties of the Start Menu policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Videos Folder Redirection Options Changed |
Created when Settings properties of the Videos policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
User Videos Folder Redirection Target Path Changed |
Created when Target properties of the Videos policy are changed in the Windows Settings Folder Redirection policies. |
Medium |
|
Wireless Network Policy Added |
Created when a Wireless Network policy is added to the Computer Configuration Group Policy. |
Medium |
|
Wireless Network Policy Changed |
Created when a Wireless Network policy in the Computer Configuration Group Policy is changed. |
Medium |
|
Wireless Network Policy Removed |
Created when a Wireless Network policy is removed from the Computer Configuration Group Policy. |
Medium |
