windows-itpro-docs/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md

title, description, ms.assetid, ms.reviewer, manager, ms.author, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, ms.localizationpriority, author, ms.date, ms.technology, ms.topic

title	description	ms.assetid	ms.reviewer	manager	ms.author	ms.pagetype	ms.prod	ms.mktglfcycl	ms.sitesec	ms.localizationpriority	author	ms.date	ms.technology	ms.topic
Audit Other Privilege Use Events	Learn about the audit other privilege use events, an auditing subcategory that should not have any events in it but enables generation of event 4985(S).	5f7f5b25-42a6-499f-8aa2-01ac79a2a63c		aaroncz	vinpa	security	windows-client	deploy	library	low	vinaypamnani-msft	09/06/2021	itpro-security	reference

Audit Other Privilege Use Events

This auditing subcategory should not have any events in it, but for some reason Success auditing will enable the generation of event 4985(S): The state of a transaction has changed.

Computer Type	General Success	General Failure	Stronger Success	Stronger Failure	Comments
Domain Controller	No	No	No	No	This auditing subcategory doesn’t have any informative events inside.
Member Server	No	No	No	No	This auditing subcategory doesn’t have any informative events inside.
Workstation	No	No	No	No	This auditing subcategory doesn’t have any informative events inside.

Events List:

• 4985(S): The state of a transaction has changed.