deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-22 05:43:41 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
Files
4833d49ec07d38d64ca5ff9b087fb4e6ede4a459
windows-itpro-docs/windows/keep-secure/audit-process-termination.md
Brian Lich edb7f5a067 new build
2016-03-31 09:25:25 -07:00

1.5 KiB
Raw Blame History

title, description, ms.assetid, ms.prod, ms.mktglfcycl, ms.sitesec, author
title description ms.assetid ms.prod ms.mktglfcycl ms.sitesec author
Audit Process Termination (Windows 10) This topic for the IT professional describes the Advanced Security Audit policy setting, Audit Process Termination, which determines whether the operating system generates audit events when an attempt is made to end a process. 65d88e53-14aa-48a4-812b-557cebbf9e50 W10 deploy library brianlic-msft

Audit Process Termination

Applies to

  • Windows 10
  • Windows 10 Mobile

This topic for the IT professional describes the Advanced Security Audit policy setting, Audit Process Termination, which determines whether the operating system generates audit events when an attempt is made to end a process.

Success audits record successful attempts and Failure audits record unsuccessful attempts.

If you do not configure this policy setting, no audit event is generated when a process ends.

This policy setting can help you track user activity and understand how the computer is used.

Event volume: Varies, depending on how the computer is used

Default: Not configured

Event ID Event message

4689

A process has exited.

 

Related topics

Advanced security audit policy settings