windows-itpro-docs/windows/keep-secure/audit-directory-service-replication.md
2016-06-02 15:42:37 -07:00

2.5 KiB
Raw Blame History

title, description, ms.assetid, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author
title description ms.assetid ms.pagetype ms.prod ms.mktglfcycl ms.sitesec author
Audit Directory Service Replication (Windows 10) This topic for the IT professional describes the advanced security audit policy setting, Audit Directory Service Replication, which determines whether the operating system generates audit events when replication between two domain controllers begins and ends. b95d296c-7993-4e8d-8064-a8bbe284bd56 security w10 deploy library Mir0sh

Audit Directory Service Replication

Applies to

  • Windows 10
  • Windows Server 2016

Audit Directory Service Replication determines whether the operating system generates audit events when replication between two domain controllers begins and ends.

Event volume: Medium on domain controllers.

Computer Type General Success General Failure Stronger Success Stronger Failure Comments
Domain Controller No No IF IF IF - Events in this subcategory typically have an informational purpose and it is difficult to detect any malicious activity using these events. Its mainly used for Active Directory replication troubleshooting.
Member Server No No No No This subcategory makes sense only on domain controllers.
Workstation No No No No This subcategory makes sense only on domain controllers.

Events List:

  • 4932(S): Synchronization of a replica of an Active Directory naming context has begun.

  • 4933(S, F): Synchronization of a replica of an Active Directory naming context has ended.