--- title: 6424(S) The installation of this device was allowed, after having previously been forbidden by policy. (Windows 10) description: Describes security event 6424(S) The installation of this device was allowed, after having previously been forbidden by policy. ms.pagetype: security ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library author: Mir0sh --- # 6424(S): The installation of this device was allowed, after having previously been forbidden by policy. **Applies to** - Windows 10 - Windows Server 2016 This event occurs rarely, and in some situations may be difficult to reproduce. ***Subcategory:*** [Audit PNP Activity](audit-pnp-activity.md) ***Required Server Roles:*** None. ***Minimum OS Version:*** Windows 10 \[Version 1511\]. ***Event Versions:*** 0. ## Security Monitoring Recommendations - There is no recommendation for this event in this document.