mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-21 13:23:36 +00:00
51 lines
2.6 KiB
Markdown
51 lines
2.6 KiB
Markdown
---
|
|
title: Audit Application Group Management (Windows 10)
|
|
description: The policy setting, Audit Application Group Management, determines if audit events are generated when application group management tasks are performed.
|
|
ms.assetid: 1bcaa41e-5027-4a86-96b7-f04eaf1c0606
|
|
ms.reviewer:
|
|
manager: aaroncz
|
|
ms.author: vinpa
|
|
ms.pagetype: security
|
|
ms.prod: windows-client
|
|
ms.mktglfcycl: deploy
|
|
ms.sitesec: library
|
|
ms.localizationpriority: none
|
|
author: vinaypamnani-msft
|
|
ms.date: 09/06/2021
|
|
ms.technology: itpro-security
|
|
ms.topic: reference
|
|
---
|
|
|
|
# Audit Application Group Management
|
|
|
|
Audit Application Group Management generates events for actions related to [application groups](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc771579(v=ws.11)), such as group creation, modification, addition or removal of group member and some other actions.
|
|
|
|
[Application groups](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc771579(v=ws.11)) are used by [Authorization Manager](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc726036(v=ws.11)).
|
|
|
|
Audit Application Group Management subcategory is out of scope of this document, because [Authorization Manager](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc726036(v=ws.11)) is very rarely in use and it is deprecated starting from Windows Server 2012.
|
|
|
|
| Computer Type | General Success | General Failure | Stronger Success | Stronger Failure | Comments |
|
|
|-------------------|-----------------|-----------------|------------------|------------------|---------------------------------------------------------|
|
|
| Domain Controller | - | - | - | - | This subcategory is outside the scope of this document. |
|
|
| Member Server | - | - | - | - | This subcategory is outside the scope of this document. |
|
|
| Workstation | - | - | - | - | This subcategory is outside the scope of this document. |
|
|
|
|
- 4783(S): A basic application group was created.
|
|
|
|
- 4784(S): A basic application group was changed.
|
|
|
|
- 4785(S): A member was added to a basic application group.
|
|
|
|
- 4786(S): A member was removed from a basic application group.
|
|
|
|
- 4787(S): A non-member was added to a basic application group.
|
|
|
|
- 4788(S): A non-member was removed from a basic application group.
|
|
|
|
- 4789(S): A basic application group was deleted.
|
|
|
|
- 4790(S): An LDAP query group was created.
|
|
|
|
- 4791(S): An LDAP query group was changed.
|
|
|
|
- 4792(S): An LDAP query group was deleted. |