windows-itpro-docs/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md

title, description, ms.assetid, ms.reviewer, manager, ms.author, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, ms.localizationpriority, author, ms.date, ms.technology

title	description	ms.assetid	ms.reviewer	manager	ms.author	ms.pagetype	ms.prod	ms.mktglfcycl	ms.sitesec	ms.localizationpriority	author	ms.date	ms.technology
Audit Other Privilege Use Events (Windows 10)	Learn about the audit other privilege use events, an auditing subcategory that should not have any events in it but enables generation of event 4985(S).	5f7f5b25-42a6-499f-8aa2-01ac79a2a63c		dansimp	dansimp	security	m365-security	deploy	library	none	dansimp	09/06/2021	windows-sec

Audit Other Privilege Use Events

This auditing subcategory should not have any events in it, but for some reason Success auditing will enable the generation of event 4985(S): The state of a transaction has changed.

Computer Type	General Success	General Failure	Stronger Success	Stronger Failure	Comments
Domain Controller	No	No	No	No	This auditing subcategory doesn’t have any informative events inside.
Member Server	No	No	No	No	This auditing subcategory doesn’t have any informative events inside.
Workstation	No	No	No	No	This auditing subcategory doesn’t have any informative events inside.

Events List:

• 4985(S): The state of a transaction has changed.