diff --git a/windows/keep-secure/audit-authorization-policy-change.md b/windows/keep-secure/audit-authorization-policy-change.md index 0194d0a071..e9b847fe29 100644 --- a/windows/keep-secure/audit-authorization-policy-change.md +++ b/windows/keep-secure/audit-authorization-policy-change.md @@ -23,7 +23,7 @@ Authorization policy changes that can be audited include: - Changing the Encrypting File System (EFS) policy. -Event volume: Low +Event volume: Very high Default: Not configured